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SYNOPSIS 


The intervention of statutory requirements as a panacea to 
protect the environment from oil tanker pollution has insti- 
gated a radical change to the design and construction of oil 
tankers. 

Since the ‘boom’ years of oil tanker production in the 70's, 
and the introduction of MARPOL 73/78 in the 80's, the general 
age of the fleet has increased and considerable experience has 
been gained in the operation, inspection and maintenance of 
tankship structures. 

It is imperative, therefore, at the dawning of a new age in 
oil tanker construction that the lessons learnt from these infor- 
mative years be applied at the outset to the new generation 
designs in order to maintain the initial impetus for global envi- 
ronmental protection throughout the life of the new tankers by 
the appropriate protection, maintenance and inspection of 
these tankship structures. 


1. INTRODUCTION 


The last five years have seen the world tanker fleet increasing in 
age such that the predominance of tankers are reaching, or have 
passed, their third special survey. With the cost of newbuildings 
continually rising, consideration has been given by the tanker 
owners/ operators and the Classification Societies to extending 
the life of tankers well beyond their fourth special survey. 

The oil majors, through the Tanker Structure Cooperative 
Forum, a body comprised of tanker owners, Classification Soci- 
eties, International Chamber of Shipping and others, have 
indicated their methods for corrosion monitoring and planned 
maintenance schemes for their fleets. Studies of corrosion rates 
in ballast and cargo tanks, with and without coatings, are being 
progressed at present. 

This trend towards life extension has now been adversely 
influenced by recent major oil spills in US territorial waters 
caused by the Exxon Valdez and, toa lesser extent, the American 
Trader. Although the Exxon Valdez, was, at the time, a modern 
segregated ballast tanker (SBT), fully complying with the Regu- 
lations for pollution prevention such as MARPOL 73/78, the 
grounding damage, and subsequent oil pollution caused by 
this incident, led to fierce environmental lobbying of the US 
Administration. This culminated in the US Academy of Science 
being commissioned to investigate all aspects of cargo tank 
protection whilst, at the same time, the Senate and House of 
Representatives enacted bills requiring double hulls for new 
tankers and the gradual phasing out of single hull tankers. The 
result of these activities has become known as the Oil Pollution 
Act 1990, or OPA 90. This was quickly followed by calls to 
amend MARPOL 73/78 to provide similar environmental 
protection measures. 

On the one hand, many owners were studying means to 
extend the working life of their fleets, whilst those owners trad- 
ing with the US were having to balance life extension with the 
need either to retrofit double bottoms into ageing tankers or 
enter the newbuilding market and order double bottom/ 
double hull tankers. The financial penalties of spilling oil in US 
waters prompted some owners to withdraw from operating 
ships to the US. 

The terms for phasing out single hull tankers have now been 
legislated by USCG and IMO, and owners are faced with a limit 
to the working life of these tankers. Retrofitting is not really 
feasible, not only from structural considerations, but also due 
to the newbuilding yards not wanting this work and the repair 
yards not wishing to tie-up their building docks and turn away 
repair work and easier conversion. 

Double hull tankers are, therefore, a reality and a consider- 
able number have been built since January 1993. Lloyd’s 
Register has classed a majority of these starting with the first 
European, Eleo Maersk, and first Japanese, Arosa, VLCC double 
hull tankers. 

This paper is based on the knowledge gained and is 
intended to give the Surveyor an understanding of double hull 
oil tankers from design through to survey. 

The legislation that governs double hull tanker arrange- 
ments is explained, and examples of typical general 
arrangements and primary structures resulting from these 
statutory requirements are shown. Factors influencing the 
design, such as higher tensile steel, sloshing, stability, construc- 
tion tolerances are outlined. The concept of critical areas within 
the structure are detailed, and the appraisal process and appli- 
cable class notations are outlined. The protection of the 
steelwork, corrosion trends and access for maintenance and 
inspection are discussed, and the paper culminates with the 
survey requirements during the service life of the ship, from 
both the Owner’s and Surveyor’s viewpoint. 


2. LEGISLATION 
2.1 Background 


The double hull tanker is not a new phenomenon. Many ships 
have been built with double bottoms and with double sides, 
i.e. SBT tankers. Chemical tankers built to IMO IBC Code Type 1 
and 2 are examples of double hull tankers that require segre- 
gation of hazardous chemicals at side and bottom to comply 
with specific damage criteria. Similarly LNG tankers employ- 
ing membrane systems, OBOs, ore carriers and ore/oil carriers 
have likewise all been built with double hulls (see Figure 2.1). 

Although a few double bottom tankers have been designed 
and are in service to satisfy Owners’ requirements, compulsory 
regulations concerning this design of tanker were precipitated 
largely as a result of the Exxon Valdez. This tanker stranded on 
Bligh Reef in Prince William Sound in Alaska on the 24th March 
1990, releasing 50,000 tonnes (260,000 barrels) of heavy crude 
oil. This caused widespread pollution and destruction of birds 
and marine life. The United Kingdom has also experienced 
large scale incidents of oil pollution around its coastline, such 
as those caused by the Torrey Canyon, Amoco Cadiz and, more 
recently, by the Braer. 

Public opinion in the United States forced the Bush Admin- 
istration to precipitate rapid action in the Senate, resulting in 
two pollution bills being enacted: 


Bill S.686 — required, in general terms, that within 
12 months of 6th January 1990 all new oil tankers be 
equipped with double hulls and double bottoms. 


Bill HR.3384 — contained proposals to be studied by the 
National Academy of Science to enable better protection 
of the environment. This proposal did not mention double 
bottoms but only double hulls. 


Chemical Tanker 


Gas Tanker 


For existing tankers the proposal aimed at phasing out 
single hull tankers totally by the year 2015. 

It could be argued that the US concern was exaggerated, and 
that its fears were not borne out by statistics? A study of the 
incidences of tanker groundings and collisions indicated that 
the number of incidences in the 10,000 to 50,000 tonnes dwt 
range was greater than for the tankers in excess of 100,000 
tonnes dwt. These statistics are represented in Figure 2.2 for 
grounding incidences, and Figure 2.3 for collision incidences. 
It should be realised that the impact of a single spill froma large 
tanker (such as Torrey Canyon, Amoco Cadiz, Exxon Valdez) 
captures the public’s imagination and forces political attention 
on an international scale. 

The resulting legislation intends to reduce oil pollution, in 
the marine environment, resulting from collision and ground- 
ing damage. It should be noted, however, that when looking at 
the worst tanker pollution incidences, 29% were due to ground- 
ings, 29% were due to collision, 21% were due to fire and 
explosions, and 21% were due to structural failure. 

The new legislation for double hull tankers does not take 
account of the tanker operator with a high safety and mainte- 
nance record. All owners/ operators will be bracketed together 
and forced to comply if their ships trade to the US. These regu- 
lations have now been enhanced by the introduction of the new 
IMO Regulations which also require a double hull for certain 
size tankers, and, therefore, all owners, by a certain date, may 
only operate double hull tankers, i.e. tankers with a double 
bottom and double side dedicated to the carriage of ballast 
water. 

On Ist August 1990, the US House of Representatives passed 
the Oil Pollution Act of 1990 (OPA 90) requiring double hulls 
on newly built oil tankers. See Table 2.1. 

In view of the US legislation, and the need to trade with the 
US, world-wide interest was generated. As a result IMO, at its 
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Distribution of damages from Oil Tanker collisions 


or 


Table 2.1 - US Oil Pollution Act 1990 
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New Oil Tankers All 
Contract after 30.06.1990 
Delivery after 01.01.1994 | <5000 GT 


< 5 000 GT 


Existing Oil Tankers 
Contract after 30.06.1990 
Delivery after 01.01.1994 


>5 000 GT 


> 5 000 GT 


> 20 000 T Dwt 
> 20 000 T Dwt 


All 


Ship Owners liability for oil spills 


18.08.1990 Double hull to be fitted 
Can carry oil in separate 
containment within ship's hull 


Double hull or double 
containment 


Double hull to be fitted 


If DB or DS already fitted - 
double hull to be fitted 


Double bottom to be fitted 
Double sides to be fitted 
Exemption permitted for 
tankers offloading at specified 


deep water ports (Louisiana Oil 
Port - Loop) or 60 miles offshore 


For negligence, wilful misconduct or failure to report oil spill — no limit 


Other Vessels > 3 000 GT - $7 200 per GT or $10 000 000 - whichever is greater 
Vessels < 3 000 GT - $1 200 or $2 000 000 - whichever is greater 


30th Session in November 1990, instructed a Working Group 
to formulate an Amendment to MARPOL Regulations to incor- 
porate double hull requirements. This was followed by further 
intense Working Group sessions and vigorous behind the 
scenes activities of all participants. The outcome of IMO Work- 
ing Group sessions, at which Flag Administrations and other 
bodies such as Intertanko, International Chamber of Shipping, 
International Association of Classification Societies, Friends of 
the Earth, Greenpeace and others were well represented, was 
the addition of Regulations 13F and 13G to MARPOL 73/78 
Annex I relating to new tankers and existing tankers respec- 
tively. These new Regulations are shown in a summarised 
version in Tables 2.2 and 2.3. 


2.2 Previous Legislation 


2.2.1 Introduction 


In response to growing concern over the consequences of 
pollution of the sea by ships, and the inadequacy of existing 
legislation to control it, the International Conference on Marine 
Pollution was convened in 1973 under the auspices of the Inter- 
Governmental Maritime Consultative Organisation (IMCO). 
The result was The International Convention for the Preven- 
tion of Pollution from Ships, 1973. Regulations for the 
Prevention of Pollution were contained in Annexes. Annex I, 
covering pollution by oil, and Annex II, covering ‘noxious 
substances in bulk’, became mandatory when the Convention 
came into force. Three further Annexes relating to unitised 
cargoes, sewage and garbage are applicable at the option of 
administrations. However, due to certain difficulties, arising 
mainly from the requirements of Annex II, the necessary acces- 
sions were not forthcoming. 

In 1978, IMCO convened the Conference on Tanker Safety 
and Pollution Prevention to consider proposals to modify 
Annex lin the light of experience gained since 1973. The result- 
ing Protocol, in addition to amending Annex I, legally 
separated Annex II to ensure that Annex I could be ratified 
independently at the earliest possible date. 

The separation served its purpose and the amended Regu- 
lations for the Prevention of Pollution by Oil came into force 


in October 1983. Generally referred to as MARPOL 73/78, they 
have had a profound influence on the design, equipment and 
operation of oil tankers. 

Of the various MARPOL 73/78 requirements, the following 
are of particular relevance, since they influence the configura- 
tion of the hull by placing limits on the sizes and locations of 
cargo tanks. They apply to crude carriers with deadweights 
20,000 tonnes or over and product carriers, 30,000 tonnes or 
over. 


Reg. 13 Segregated Ballast Tanks, Dedicated Clean Ballast 
Tanks and Crude Oil Washing. 


Reg. 13E Protective Location of Segregated Ballast Spaces. 
Reg. 22 Damage Assumptions. 
Reg. 23 Hypothetical Outflow of Oil. 


Reg. 24 Limitation of Size and Arrangement of Cargo Tanks. 


Table 2.3 - MARPOL 73/78 ANNEX | 
Regulation 13G, Existing oil tankers 


1. Application 
Crude Oil Tankers 
Product Tankers 
. Effective date 06.07.1995 for: 
a) Contract placed 
b) Keel laid 
c) Delivery 


2 20 000 T Dwt 
2 30 000 T Dwt 


before 06.07.1993, or 
before 06.01.1994, or 
before 06.07.1996 


. Exemption 
Existing tankers fitted with DB/wing tanks that satisfy IBC Code for 
Type 2 cargo tank location 


. Pre-MARPOL (built before October 1983) 
Tankers to comply with Reg. 13F not later than 25 years after 
delivery date. However, if 30% of the side or bottom is protected 
with non-oil tanks then limit extended to 30 years 


. Post MARPOL 
Tankers to comply with Reg. 13F not later than 30 years after 
delivery date 


Table 2.2 - MARPOL 73/78 ANNEX | Regulation 13F, New oil tankers 


Effective date: Contract placed: 
Keel laid 


Delivery 


Each Tank Capacity 
< 700m? 


No requirement 


Width of Side 
Tanks 
(M) 


0.4 + 


Minimum 0.76m 


Double Bottom B/15 
Height Minimum value 0.76m 
(M) 


Mid Height Deck 


> 700m 


2.4 Dwt 
20 000 


after 06.07.1993, or 
after 06.07.1994, or 
after 06.07.1996 


Dwt 
0.5 + 0 000 or 2.0m 
(whichever is lesser) 
minimum value 1.0m 


B/15 or 2.0mm 


(whichever is lesser) 
Minimum value 1.0m 


1.1.Ag. Po. g + 100Ap < dy. Pg .g 


height of cargo above shell 
cargo density 

cargo tank vacuum/pressure 
valve setting 

minimum draught 

Sea water density 


Other Method 
of Protection 


Subdivision and 
Stability Criteria 


To be developed 


Extent of damage assumed 
Longitudinal Extent: Ships < 75 000 —- 0.4L from FP 


Ships 2 75 000 — 0.6L from FP 


Transverse Extent: B/3 
Vertical Extent: 


Breach of outer hull 


Total capacity of wing tanks, DB tanks, fore peak and after peak tanks shall be less than the capacity of 
segregated ballast necessary to meet the requirements of regulation 13. 


Ballast piping shall not pass through cargo tanks and cargo piping shall not pass through ballast tanks. 
Oil not to be carried in space forward of collision bulkhead. 
Due regard to be taken of the central safety aspect, including the need for maintenance and inspection of 


bottom and wing tanks. 


2.2.2 Regulation 13 — Segregated Ballast Tankers (SBT) 


In order to avoid potential pollution by the discharge of oily 
ballast water, oil tankers must have dedicated ballast tanks 
with sufficient capacity to provide defined minimum opera- 
tional draughts. Cargo tanks may be ballasted only in 
extremely severe sea conditions where the Master judges there 
to be a danger to the ship if the draughts are not increased. 

For compliance with this requirement, the minimum 
volume of the ballast tanks has to be about 30% of that of the 
cargo tanks. Thus, compared with a pre-MARPOL design, 
typically having one pair of wing tanks reserved for water 
ballast, a segregated ballast tanker can carry between 15% and 
20% less cargo within the same hull dimensions. In addition, 
in Regulation 13(2), there are minimum draught, trim and 
propeller immersion requirements for the ship in the SBT 
condition. 


2.2.3 Regulation 13E — Protective Location (PL) of Segre- 
gated Ballast Spaces 


In order to provide a measure of protection against oil outflow 
in the event of collision or grounding, the segregated ballast 
tanks are required to extend over a stipulated proportion of 
the outer surface of the hull. This varies from about 45% for a 
20,000 tonnes dwt ship to about 30% at 200,000 tonnes dwt. 
For side ballast tanks to be included in the ship’s protected 
area, they must extend inboard from the shell a minimum of 
2 metres. In respect to double bottom ballast tanks, the depth 
of double bottom must be B/15, or 2 metres, whichever less. 


2.2.4 Regulation 22 - Damage Assumptions 


In order to calculate the outflow of oil in a damage scenario, 
Regulation 22 details the extent of side and bottom penetration 
to simulate collision and grounding damage. 

One result of these extents, combined with Regulations 13E 
and 23, has been that double bottom tankers complying with 
the double bottom height requirement can provide their entire 
required protective location area with the double bottom tanks 
alone. Hence, before the introduction of double hull require- 
ments, a number of double hull tankers had side tanks with a 
breadth less than 2 metres as these tank volumes were not 
needed for the ship to comply with the protective location 
requirements. The size of the side tanks will be based on the 
amount of ballast required to meet MARPOL 73/78 minimum 
draught requirements (Reg. 13(2)). 


2.2.5 Regulation 24 — Limitation of Size and Arrangement 
of Cargo Tanks 


The size of cargo tanks is chosen to meet the limitations of 
hypothetical oil outflow resulting from the maximum defined 
side and bottom penetration extents (Reg. 22). This is depen- 
dent on the size of the ship, and confines the oil outflow to 
between 30,000 and 40,000 cubic metres. Additional limitations 
are placed on the lengths of cargo tanks which must not 
exceed 20% of the ship length for wing tanks and between 13% 
and 20% for centre tanks. 

In addition to the foregoing, MARPOL stipulates subdivi- 
sion and damage stability criteria which must be satisfied by 


all oil tankers of 150 gross tons and above. These also influence 
the location of longitudinal bulkheads and the lengths of tanks, 
particularly in smaller ships not subject to segregated ballast 
or protective location requirements. 


2.2.6 Double Hull Tankers 


MARPOL Annex I Regulations 13, 13(2), 13E, 22 and 24 are still 
applicable to double hull tankers. However, there are certain 
important interpretations, as these Regulations were devel- 
oped for single hull tankers and, therefore, the formulae and 
terminology were based on this concept. 

In particular, Regulation 24(4) governing the maximum 
permissible tank lengths, can be mis-interpreted with regard 
to what constitutes a centre cargo tank. The definitions concern- 
ing tanks given in Regulation 1 are as follows:- 


(12) “Tank” means an enclosed space which is formed by the 
permanent structure of a ship and which is designed for 
the carriage of liquid in bulk. 


(13) “Wing Tank” means any tank adjacent to the side shell 
plating. 


(14) “Centre Tank” means any tank in board of a longitudinal 
bulkhead. 


Clearly the latter definition can have a marked effect on 
what constitutes a centre cargo tank. 

Consider a typical VLCC double hull design incorporating 
narrow side ballast tanks and two additional longitudinal bulk- 
heads at approx B/6 off centre line, (ie. 3 cargo tanks and 2 ballast 
tanks across the ship). Paragraph (14) could be taken as identi- 
fying all three cargo tanks as “centre tanks”. This however, would 
give a severely restrictive tank length parameter. 

The definitions given in (13) and (14) will need to be clarified 
by IMO to define wing cargo tanks and longitudinal bulkheads 
in more detail. The wing cargo tank should be more appropri- 
ately termed ‘side cargo tank adjacent to inner hull’. 


2.3 MARPOL Annex I for Double Hull Tankers 


2.3.1 Introduction 


The Marine Environment Protection Committee, at its 32nd 
session held at IMO on 2nd - 6th March 1992, decided to adopt 
new Regulations for new and existing tankers in the form of 
Regulations 13F and 13G respectively in Annex I of 
MARPOL 73/78. 

The main features of the new Regulations extracted from 
the final Report MEPC 32/WP3 (5.3.92) and approved by the 
Plenary are summarised in the following sections. 


2.3.2 Regulation 13F — New Tankers 

This Regulation applies to oil tankers of 600 tonnes deadweight 
and above for which: 

(i) contract placed on or after 6th July 1993, or 

(ii) keel laid on or after 6th January 1994, or 

(iii) delivery on or after 6th July 1996, or 


(iv) major conversion contract placed on or after 6th July 1993, 
or 


(v) major conversion work starting after 6th January 1994, or 


(vi) major conversion completion 6th July 1996. 


Oil tankers 600 < dwt. < 5,000 tonnes: 


(i) requires double bottom ballast tanks (minimum depth @ 
0.76 metres) 


(ii) the capacity of each cargo tank is not to exceed 700 m3 
unless wing tanks are fitted. 


Oil tankers > 5,000 tonnes dwt: 


(i) requires double bottom and wing ballast tanks, or 
(ii) wing ballast tanks and mid-deck arrangement, or 


(iii) other methods to be developed by the Organisation. 


Oil tankers > 20,000 tonnes dwt. 


Damage assumptions specified in Reg. 25(2)(b) shall be supple- 
mented by assuming bottom raking damage: 


(1) longitudinal extent 
20,000 < dwt < 75,000 tonnes 
dwt. 75,000 tonnes 


— 0.4L from FP 


— 0.6L from FP @ 


(2) transverse extent — B/3 anywhere in the bottom 


(3) vertical extent — breach of outer hull 


Oil Tankers > 600 tonnes dwt (Additional requirements) 

(i) Ballast piping shall not pass through cargo tanks. Cargo 
piping shall not pass through ballast tanks. 

(ii) No oil is to be carried forward of collision bulkhead. 


(iii) Due regard is to be taken of the general safety aspect, 
including the need for maintenance and inspection of 
bottom and wing tanks. 


The main requirements are summarised in Table 2.2. 
2.3.3 Regulation 13G — Existing Oil Tankers 


For the purpose of this Regulation, existing tankers are deemed 


to be those for which: @ 


(i) contract placed before 6th July 1993, or 
(ii) keel laid before 6th January 1994, or 
(iii) delivery before 6th July 1996. 


This Regulation shall apply to: 


(i) crude oil tankers 20,000 tonnes dwt and above, 


(ii) product carriers 30,000 tonnes dwt and above, not fitted 
with double bottom, double hull or mid-height deck 
arrangement as prescribed in Regulation 13F. 


This Regulation shall not apply to existing tankers fitted with 
double bottom or wing tanks which satisfy the dimensions 
specified in the IBC Code for Type 2 cargo tank location. 


Effective date of this Regulation to be 6th July 1995. 
Existing tankers to be subject to an enhanced programme of 


inspections during special, intermediate and annual surveys. ry 
IMO to develop guidance. 


Existing oil tankers over 5 years old to have onboard, ina stan- 
dard format: 


(i) acomplete file of survey reports, 
(ii) results of all scantling measurements, 
(iii) a statement of structural work carried out, 


(iv) a condition evaluation report. 


Pre-MARPOL tankers: 


(i) To comply with Regulation 13F not later than 25 years 
after delivery date. However, 


(ii) if fitted with non-oil wing tanks or double bottom spaces, 
covering 30% of ship’s side OR 30% of bottom area — to 
comply with Regulation 13F not later than 30 years after 
delivery date, or 


(iii) if fitted with other arrangement, e.g. hydrostatic balance, 
(guidelines to be developed by IMO) — to comply with 
Regulation 13F not later than 30 years after delivery date. 


Post-MARPOL tankers: 


(i) To comply with Regulation 13F not later than 30 years 
after delivery date. 


These requirements are summarised in Table 2.3. 


2.4 US Oil Pollution Act 1990 (OPA 90) 


The US House of Representatives, in its Report dated 
1st August 1990, introduced what is knownas the Oil Pollution 
Act of 1990 — OPA 90. This Report asked for double hulls on 
newly built oil tankers unless greater protection can be 
achieved to the satisfaction of US Administration by other 
structural requirements. 

New tankers less than 5,000 gross tons can carry oil in sepa- 
rate containment within the ship’s hull such as independent 
tanks or drums or equivalent. 

For all existing tankers the Rules will be applicable by the 
year 2015. 

For tankers of 20,000 tonnes deadweight and above, a 
double bottom to be fitted by 1997 and double sides by 2015. 
Exception is allowed for ships dedicated to respond to 
discharge of oil or hazardous substance. 

Exemptions are permitted until January 2015 for oil tankers 
offloading at specified deep water ports, the reason being that 
studies have shown that, for these ports, the probability of 
grounding or collision is reduced by 90%. 

Phasing out to commence by 1995 on existing ships as follows: 


(i) All tankers over 5,000 gross tons with single hull to be 
fitted with double hull by 2010. 


(ii) All tankers over 5,000 gross tons with either double 
bottom or double sides to be fitted with double hull by 
2015. 


(iii) Tankers less than 5,000 gross tons to be fitted with double 
hull or double containment by 2015. 


The requirements are summarised in Table 2.1. 


& The requirements for double hull tankers are embodied in the 


USCG 33 Code of Federal Register (CFR) Part 157. 


2.5 USCG 33 Code of Federal Register (CFR) Part 157 


The United States Oil Pollution Act, OPA 90, requires that new 
build tankers are protected by a double hull. The specific 
requirements are stated in the USCG Title 33 Code of Federal 
Regulations (CFR) Part 157 “Rules for the Protection of the 
Marine Environment relating to Tank Vessels Carrying Oil in 
Bulk”. 

USCG 33 CFR 157 closely follows the MARPOL Annex I 
Regulation 13F requirements, except in one important area 
where a fundamental difference occurs. This difference lies in 
the definition of the cargo tank length and the effect this has on 
the protection required for fuel oil tanks. 

In the comments relating to USCG 33 CFR 157, the Coast 
Guard state: 


“The Coast Guard does not concur with the extension of double 
hull protection to all fuel tanks. Oil that is carried in fuel tanks 
represents a relatively small risk to the environment compared 
with the large amounts of oil contained within the cargo block. 
Also, integral fuel tanks external to the cargo block are located 
aft of the cargo block, in way of machinery spaces, which are 
less vulnerable to damage in a collision or grounding than 
more forward spaces. An integral tank carrying oil that is 
within the cargo tank length of the vessel must have double 
hull protection; this includes fuel tanks. However, a fuel tank 
aft of the cargo tank length is not required to have double hull 
protection.” 


The reference to cargo tank length is important as USCG defines 
cargo tank length in 33.CFR.147.03 (aa) as follows: 


“Cargo tank length means the length from the collision bulk- 
head or, in the absence of a collision bulkhead, from the 
transverse plane under Para. 157.10d(e)(2), to the forward 
bulkhead of the machinery spaces. In the absence of machinery 
spaces, the cargo tank length is the length to the aft bulkhead 
of the aftermost cargo tank.” 


IMO requires a cofferdam between engine room and cargo oil 
tanks and will accept a pumproom and/or fuel oil tank in lieu. 
The USCG, however, by defining the cargo area from the 
forward bulkhead of the machinery space, requires that all 
tanks carrying oil, and that includes fuel oil tanks, to be 
protected by a double hull. The USCG do not consider the 
pumproom to be a machinery space. 

An example of the arrangements excepted by USCG and 
IMO are shown in Figure 2.4 overleaf. 

This interpretation was introduced by USCG in August 
1992, and resulted in the retrofitting of double hulls in way of 
the fuel oil tanks in a number of ships just as they were about 
to be delivered. USCG would not offer dispensation for ships 
contracted before August 1992. 

The double hull in way of fuel tanks must comply with the 
width requirement for the deadweight of that ship. Lesser 
widths are not permitted. 


2.6 SOLAS 74 Regulation 59 


In respect to SOLAS 74 Chapter II-2 “Construction — Fire Protec- 
tion, Fire Detection and Fire Extinction”, the Marine Safety 
Committee introduced in their 61st Session amendments to new 
oil tankers fitted with double hulls and double bottoms. 

Regulation 59 “Venting, purging, gas-Freeing and Ventila- 
tion” requires that all double hull and double bottom spaces 
are to be provided with means for inerting, ventilating and gas 
measurement. 

This Regulation is mandatory from 1st October 1994. 


(a) Complies with USCG regulations 


Engine Rroom 


USCG cargo tank length 


(b) Complies with IMO but not USCG regulations 


| Ballast, | 


Engine Rroom 


USCG cargo tank length 


(c) Complies with both USCG and IMO regulations 
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Cargo 


Engine Rroom 


Ballast 


__USCG cargo tank length 


Figure 2.4 
Arrangements for USCG/IMO Regulations 
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3. DESIGN FEATURES OF DOUBLE HULL 
TANKERS 


3.1 Definition 


The double hull tanker can be defined as a ship for the carriage 
of MARPOL Annex I cargoes, where the cargo area is protected 
from the environment by a double hull consisting of double 
side and double bottom spaces dedicated to the carriage of 
ballast water for ships of 5,000 tonnes dwt and above. These 
ballast spaces extend for the full length of the cargo area. 

The double hull requirements are embodied in MARPOL 
Annex I Regulation 13F and, if trading with the United States, 
OPA 90 which is embodied in USCG Title 33 Code of Federal 
Register (CFR) 157. 

The aforementioned criteria do not take strength into 
account, and their minimum requirements may be exceeded by 
the designer for reasons related to achieving ballast capacity to 
comply with MARPOL and adequacy of strength, based on 
particular spacings of primary members. A typical midship 
section and transverse bulkhead is shown in Figures 3.1 and 
3.2, together with commonly used nomenclature. 


3.2 Cargo Tank Arrangements 


It is important that the Surveyor is aware of the expected cargo 
tank structures and arrangements to be employed with this 
type of ship. Typical general arrangements and midship 
sections are shown in Figures 3.3 to 3.10 for various tanker sizes. 
It should be noted, however, that many design variations will 
exist for these specific deadweights, and these arrangements 
should not necessarily be considered as the optimum arrange- 
ment. 

Tankers less than 5,000 tonnes dwt will generally have a 
double bottom in conjunction with either a double side or 
centreline bulkhead. Above 5,000 tonnes dwt the double side 
becomes mandatory, and the minimum required breadth of 
wing ballast tank will increase from 1 metre to 2 metres as the 
deadweight rises to 20,000 tonnes dwt. As this paper addresses 
double hull tankers, the mid-deck tanker concept is not 
discussed. However, asit is an alternative, a general description 
is given in Appendix A. 

In the range up to Suezmax tankers, the main significant 
changes in arrangement are in capacity and number of cargo 
tanks, as follows: 


Size (tonnes) No. of Cargo Tanks 


(No CL bhd) (CL bhd) 
20,000 dwt. 8 8(P &S) 
40,000 dwt 8 8(P &S) 
Aframax 7 7 (P & S) 
Suezmax 9 6 (P &S) 


The cargo tanks extend the full breadth transversely between 
longitudinal bulkheads and are constrained in length by the 
requirements for cargo tank size in MARPOL Annex I. Designs 
with an additional centreline longitudinal bulkhead have been 
developed, but these become less of a probability as the dead- 
weight rises due to the high hull girder shear loadings 
distributed to a centreline bulkhead. 

The two ship sizes termed Aframax and Suezmax refer to 
ships in the range 90,000— 100,000 tonnes dwtand about 130,000 
— 150,000 tonnes dwt respectively. AFRAMAX means Maxi- 
mum Associated Freight Rate and referred to ships up to 79,999 
tonnes dwt, at which point the freight rate changed. This is no 
longer applicable, and has become a general term for ships of 
about 90,000 tonnes dwt. Suezmax tankers are limited in 
draught for transit of the Suez Canal. 
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For the VLCC (the Very Large Crude Carrier), strength 
considerations generally necessitate that the cargo oil tanks be 
subdivided by two longitudinal bulkheads. With narrower 
tanks, the tank size limitations imposed by MARPOL Annex I 
would allow for longer cargo tank lengths. The double hull 
VLCC would, in general, have 5 to 6 centre, port and starboard 


cargo tanks within the cargo area. Designs with a single centre- 
line bulkhead have been developed and result in shorter cargo 
tank lengths. These ships have a deadweight range between 
280,000 and 300,000 tonnes. 

Typical general arrangements of double hull tankers are 
shown in Figures 3.3 and 3.4. 


40,000 Deadweight 


95,000 Deadweight 
(without centreline bulkhead) 
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Figure 3.3 
Typical General Arrangements of Double Hull Tankers below 100,000 tonnes dwt 
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Figure 3.4 
Typical General Arrangements of Double Hull Tankers above 100,000 tonnes dwt 


3.3 Primary Structure Smaller Tankers 


The midship section of tankers below 20,000 tonnes dwt would 
show the following arrangements, in general, with regard to 
the primary structure: 


(i) Longitudinal framing generally, but transverse framing 
may be adopted at side and longitudinal bulkhead for 
smaller tankers. 

(ii) Double bottom and single deck. Double side and double 

bottom on ships greater than 5,000 tonnes dwt. 

(iii) Centreline longitudinal bulkhead either transversely 

framed or corrugated for tankers less than 5,000 


tonnes dwt. 


(iv) Double bottom primary structure consisting of closely 


spaced floors and girders. 


(v) Double side (in excess of 5,000 tonnes dwt) with vertical 
primary webs aligned with every second double bottom 


floor. 


(vi) Single deck with deck transverses either internally or 
externally, depending on need for ease of cleaning within 


cargo tanks. 


In respect to transverse bulkheads, these are generally verti- 
cally or horizontally corrugated. Plane bulkheads with vertical 
or horizontal stiffening may also be adopted. 


Double bottom tanker 


fe ieee, ode 


Double hull tanker 


Figure 3.5 
Typical Midship Sections for smaller tankers below 
20,000 tonnes dwt 
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Examples of the above configurations for midship section and 
oiltight transverse bulkheads are shown in Figures 3.5 and 3.6. 

It is unlikely that higher yield steels would be used. If the 
tanker also complies with the IBC Code, then stainless steel 
cargo tank boundaries may exist. 


3.4 Primary Structure (up to Suezmax) 

The midship section of double hull tankers up to Suezmax 
deadweight would, in general, show the following features in 
respect to primary structure: 

(i) Longitudinal framing. 

(ii) 
(iii) 


Double bottom, double side, single deck. 


Hopper structure at juncture of double bottom and double 
side. As deadweight decreases, the need for a lower 
hopper structure, for reasons of strength, diminishes. 


(iv) Topside tank at juncture of double side and single deck, 


or no topside tank. 


(v) Double bottom primary structure consisting of closely 


spaced floors and girders. 


(vi) Double side with vertical primary webs aligned with 
every second double bottom floor. Side girders to form 
the upper flange of the lower hopper tank and lower 


flange of the topside tank. 


Vertically corrugated 


Horizontally corrugated 


Figure 3.6 
Typical Transverse Bulkheads for smaller tankers below 
20,000 tonnes dwt 


No centreline bulkhead 


Topside tank 


Centreline bulkhead 
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Figure 3.7 
Typical Midship Sections for double hull tankers up to 150,000 tonnes dwt 


(vii) Single deck with deck transverses aligned with double side 
vertical webs and supported by a single or multiple longi- 
tudinal girder system. Smaller tankers may elect for the 
primary and secondary deck stiffening on deck to provide 
for flush internal tank boundaries for cleaning purposes. 


(viii) With and without longitudinally framed centreline bulk- 
head. 


In respect to the oiltight transverse bulkheads, varied configu- 
rations may be adopted. However, the two most commonly 
expected would be as follows: 


(i) Vertically corrugated bulkheads with upper and lower 
stools. 


(ii) Plane bulkheads with vertical stiffeners and horizontal 
girders supported by vertical webs. 


Examples of the above configurations for midship section and 
oiltight transverse bulkheads are shown in Figures 3.7 and 3.8. 

As the deadweight increases, a higher degree of higher 
tensile steel utilisation would be expected, either in HT32 or 
HT36 yield strengths. In addition, steels with guaranteed 
through thickness properties (Z-plate) may be required in way 
of corrugated bulkhead lower stool plating due to higher axial 
loading in the through thickness direction. 
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Figure 3.8 
Typical Transverse Bulkhead Arrangements for double 
hull tankers up to 150,000 tonnes dwt 
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Figure 3.9 
Typical Midship Sections for double hull tankers above 150,000 tonnes dwt 


3.5 Primary Structure (VLCC) 


The midship section of double hull tankers in the VLCC dead- 
weight range would, in general, show the following features in 
respect to primary structure: 


(i) Longitudinal framing. 

(ii) Double bottom, double side, single deck. 
(iii) Two longitudinal bulkheads dividing the cargo area 
athwartships into one centre and two wing cargo tanks. 


(iv) Hopper structure at juncture of double bottom and double 


side. 


(v) Double bottom primary structure consisting of floors 
spaced every 4 to 5 metres and longitudinal girders at 
centreline, and in way of longitudinal bulkheads and 
hopper side. 


(vi) Double side with vertical primary webs aligned with 
double bottom floors. Side girders at upper part of lower 
hopper plus two to three additional side girders aligning 


with horizontal stringers on transverse bulkheads. 
(vii) Single deck with deck transverses, aligned with side webs. 


(viii) Transverse vertical primary webs in centre cargo tanks with 
cross-tie, or in wing cargo tanks with cross-tie. 


In respect to the oiltight transverse bulkheads, these would be 
expected to be plane bulkheads with vertical stiffening supported 
by horizontal stringers aligned with side girders. 
Examples of the above configurations for midship section and 
oiltight transverse bulkheads are shown in Figures 3.9 and 3.10. 
A high degree of higher tensile steel utilisation would be 
expected, either in HT32 or HT36 yield steels. In addition, steels 


with guaranteed through thickness properties (Z-plate) may 
be required for inner bottom plating at the juncture with the 
hopper slope plate. 


3.6 Use of Higher Tensile Steel 


Extensive use of higher tensile steel (HTS) is a relatively recent 
phenomenon, and, until the late sixties, ships were built almost 
entirely in mild steel. Considerations such as steelweight 
savings, welding size reductions, structural redundancy and 
computer design optimisation were features of the future. 

During the seventies, the shipbuilding boom saw the rapid 
increase in the size of oil tankers and the introduction of higher 
tensile steels HT32 and HT36, primarily at deck and bottom. 
The tanker configuration, however, being an extrapolation of 
existing designs, remained basically similar, with the exception 
of the multi-longitudinal bulkhead ships. 

With the onset of the increase in tanker deadweight came 
the growing public concern over the ecological and environ- 
mental consequences of major oil spillage. The response to this, 
as discussed earlier, produced the International Convention 
for the Prevention of Pollution from Ships 1973, and later the 
Protocol of 1978 to MARPOL 1973, whereby new oil tankers 
20,000 tonnes dwt and above should be fitted with segregated 
ballast tanks of sufficient capacity to provide minimum oper- 
ational draughts. 

The eighties, therefore, saw the birth of a generation of 
tankers influenced by these statutory measures to protect the 
environment, and competition from emerging industrialised 
countries necessitating a continual search for methods to 
reduce construction costs. 

This competitive environment, and the industry's ability to 
produce higher tensile steels at prices more comparable with 


Vertically stiffened 


Figure 3.10 
Typical Transverse Bulkheads for double hull tankers above 150,000 tonnes dwt 


mild steel, initiated structural designs for new buildings where 
extensive use of these materials was proposed. 

The resulting designs were seen to incorporate wide centre 
tanks and narrow wing tanks, the geometrical optimisation of 
the primary structure within the cargo tanks and the extensive 
use of higher tensile steels throughout. 

These developments in ship structures were characterised 
by sustained efforts to reduce steelweight by the efficient distri- 
bution of material, together with the increased use of higher 
tensile steels, resulting in minimum thicknesses being achieved, 
anda reduction inareas where larger plate scantlings were tradi- 
tionally needed. Building methods had also undergone 
transformation with the increasing size of fabricated blocks 
being handled and erected on berth. 

A major concern in the use of higher tensile steel is that it 
does not exhibit a significant gain in fatigue performance over 
mild steel, and therefore particular care requires to be taken with 
areas of detail design, bearing in mind that the stress magni- 
tudes in the structural components will be increased. 

In general, higher tensile steel allows the structure to be 
constructed in thinner plate, but does lead to significant plating 
increase in way of stress concentration areas in order to satisfy 
allowable stress criteria. The varying thicknesses of plate webs 
within a relatively small area may result in misalignment/weld 
gaps that may not be considered acceptable in relation to the 
design criteria implemented. 

Where primary structures such as webs are constructed in 
higher tensile steel, the deflection magnitudes of these members 
will be increased and this, in turn, will impose additional load- 
ings in the fabrication joints. 

The use of higher tensile steels with yield stresses in excess 
of 36 kg/mm has not been accepted by LR for oil tanker struc- 
tures. Proposals have been received for other ship types, 
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notably container ships and icebreakers, where designs include 
HT40 and HT50 steels. 

The possibility of certain shipbuilders proposing HT40 or 
HT42 steels for the deck and bottom of oil tankers, with the 
remaining structure comprising HT32 or HT36 steels, was once 
seen as feasible at the end of the eighties, assuming the 
construction costs and weight savings are commercially viable 
within the present or future scope of Classification Rules. 
Certain tankers for Japanese domestic owners were built with 
HT40 decks and bottoms. 

From fatigue tests carried out for TMCP HT40 steels, the 
scatter band of results has indicated a fatigue strength below 
that associated with HT32 steels. Those carried out for HT50 
steels have indicated fatigue strengths at high frequency low 
stress amplitudes similar to HT27 and HT36. 

The advantages of using these steels where the tensile 
strength may allow a lower steel factor, k, to be used for scant- 
ling derivation, may be negated by a reduction of fatigue 
strength when compared toa similar ship constructed in HT32 
or HT36 steels. 

The fatigue problems occurring in Japanese HT36 VLCC 
tankers at the end of the eighties caused owners to rethink the 
extended use of HTS and, today, most owners’ specifications 
will endeavour to restrict the use of HTS as much as possible. 

It should be emphasised that the extensive use of higher 
tensile steel will not reduce the life of the ship if the design 
meets the appropriate stress, buckling and fatigue criteria, 
together with the requisite constructional tolerances during the 
building phase. 

When dealing with HTS for ship application, reference 
should be made to Lloyd's Register’s “Rules for the Manufac- 
ture, Testing and Certification of Materials.” 


4. ADDITIONAL DESIGN INFLUENCES ON 
DOUBLE HULL TANKERS 


4.1 Longitudinal Strength 


Prior to the introduction of double hull tankers, oil tankers 
operated with hull girder still water bending moments around 
80% of the Rule permissible value in the ballast hogging loading 
condition. 

This was due to the arrangement of ballast tanks whereby 
two or three pairs of relatively large ballast tanks were located 
at specific intervals along the cargo tank length, thereby limit- 
ing the hogging moment. 

With the double hull tanker, the ballast is now evenly 
distributed over the entire cargo tank length within the double 
side and double bottom, resulting in actual still water bending 
moments in the hogging ballast conditions near 100% of the 
Rule permissible. 

Particular shipowners apply a company policy limiting the 
actual still water bending moments to 80% of the Rule permis- 
sible, and this has led one shipyard into providing wider ballast 
tanks at midships to reduce the hogging bending moment. 


4.2 Cargo Dynamic Movement 


4.2.1 Introduction 


It is now a requirement of most shipowners that their tankers 
be designed for the carriage of partial cargoes. With the double 
hull tanker, careful consideration needs to be given to the cargo 
tank boundary plating and stiffening exposed to the dynamic 
motion of the cargo within the tank. 

Before the advent of the wide centre tank segregated ballast 
tank designs, oil tankers were generally constructed such that 
the longitudinal bulkheads were positioned less than 0.3 ship 
breadth from centreline. Centre cargo tanks with lengths 
greater than 0.15 ship length incorporated wash bulkhead 
structures at mid-tank length. This geometric configuration 
would not normally result in synchronisation between ship and 
partial cargo natural frequencies and, thereby, alleviated the 
probability of significant impact forces being set up. 

After the implementation of MARPOL 73/78, the geometry 
of the cargo tanks began to undergo radical change. The loca- 
tion of the longitudinal bulkhead moved progressively 
outboard, with the ultimate locations being observed with the 
three longitudinal girder designs in which the longitudinal 
bulkheads were nearer 0.4 ship breadth from centreline. The 
longitudinal girders provided a degree of motion dampening 
at low fill levels, but at higher fill levels, in excess of 60%, high 
impact pressures resulted at the upper strakes of longitudinal 
bulkhead and deck plating inboard of the longitudinal bulk- 
head. 

The scantlings of the plating and stiffening can, of course, 
be increased to sustain these high magnitude pressures, but 
there is a practical limit to these increases. Above a certain level 
of impact pressure, means other than scantling increases must 
be found. The simplest option is to enforce a barred filling 
range, but this may restrict the operation of the ship. 

As sloshing in the roll mode is very susceptible to changes 
in metacentric height (GM), and in the pitch mode to draught, 
a limitation on GM and draught for particular fill levels could 
be applied. This could, however,be operationally impractical. 

The incorporation of a wash bulkhead structure would 
completely alleviate the sloshing problems. However, this may 
prove costly in terms of steelweight if not included as part of 
the original specification. It should be noted that even wash 
bulkhead structures attract load and, therefore, must be 
designed accordingly. A specific LR classed tanker, having been 
found to exhibit high impact forces in the roll mode, was 
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Comparison of ship and cargo natural periods for 
conventional and double hull Suezmax tanker in roll mode 


redesigned to include a centreline wash bulkhead. This bulk- 
head was then found to support 34%-40% of the hull shear load 
and, therefore, required considerable plating increases to 
sustain the resulting shear stresses. 

One further solution is to designate certain tanks for partial 
fillings and increase the scantlings of these tanks only. This solu- 
tion is often used for floating production storage units and 
some shuttle tankers where loading at sea in all weathers is 
required. 

The double hull tanker design is virtually free of most inter- 
nal structure in the cargo tanks. Whilst these designs may be 
considered ‘environmentally friendly’ and ease cleaning oper- 
ations, the probability of cargo sloshing at partial fills is high 
in the roll mode for the wide tank Aframax and Suezmax 
designs, and in the pitch mode for long tank VLCC designs. 


4.2.2 Assessment of Dynamic Forces 


In the first instance, the possibility of sloshing forces being set 
up must be assessed. This is accomplished by the calculation 
of the natural periods of ship and cargo in the roll and pitch 
mode. If synchronisation is indicated, then direct calculations 
using a finite difference model to represent the cargo tank and 
fluid is carried out to assess the impact pressures of the cargo 
on the boundary plating and stiffening. 

Previous experience has established that significant magni- 
tudes of dynamic pressure may occur in rolling when the ship’s 
natural roll period is within 5 seconds of the fluid natural 
period. In respect to pitching, significant pressures can occur 
when the ship’s natural pitch period is greater than a figure 
which is 3 seconds less than the fluid natural period. 
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An example of the effect of increasing the tank breadth and 
freeing the cargo tank of internal structure is shown in 
Figure 4.1 for Suezmax tankers. It can be seen that the natural 
periods of the cargo in the roll mode at each fill height increases 
for the double hull tanker and are closer to the natural period 
of roll of the ship. 

For comparative purposes, if one considers a GM of 7.5 
metres, it can be seen from the conventional design that 
synchronisation will occur at fill heights less than 27% of the 
tank depth and these will not, in all probability, result in signif- 
icant impact pressures due to the dampening effect of the 
bottom centreline girder. In respect to the double hull design, 
it can be seen for the same GM that the synchronisation will 
occur at all fill heights below 82% of the tank depth. With a 
smooth tank this will result in high impact loads to the inner 
hull and to the deck head requiring local increases to plating 
and stiffening. In extreme cases, where scantling increases are 


of a magnitude to be undesirable, then a barred filling range 
may be imposed. 

Lloyd's Register has an in-house mainframe program called 
LRFLUIDS to compute the impact pressures on the cargo tank 
boundaries. An example of the model and pictorial output for 
an Aframax tanker in the roll mode and a VLCC in the pitch 
mode are shown in Figures 4.2 and 4.3. 


4.2.3 Assessment of Structural Capability 


The acceptability of the inner hull, transverse bulkheads and 
deck structures can be determined by comparing the dynamic 
impact pressures predicted by the LRFLUIDS program with the 
ultimate strength of the plating and stiffeners. 

The program assesses the collapse pressure of a stiffened 
panel comprising a single stiffener and associated plating 
having a plate width of one stiffener spacing. 
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Figure 4.3 
LRFLUIDS velocity vector plot of fluid motion in pitch mode 
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The collapse of the plating is calculated on the basis of a 
defined allowable permanent set, taking into account the 
membrane stresses induced in the plating as it deforms. The 
collapse of the stiffener is based on classic plastic collapse 
formulations, and considers both shear and bending deforma- 
tions. Allowance is made for the small proportion of the load 
transmitted directly from the plating to the surrounding 
primary structure. 

In the case of the longitudinal bulkhead and deck structure, 
hull girder longitudinal bending stresses are also applied, 
comprising the full still water stress, together with a proportion 
of the wave stress on a probabilistic basis. 


4.3 Stability 


4.3.1 General 


It can be seen from the double hull midship sections for ships 
up to Suezmax in size that extreme breadths of centre cargo 
tanks can arise where the tank extends transversely from inner 
hull to inner hull, and is devoid of internal structure, except at 
deck head. 

Owners have recently expressed concern regarding the 
stability of double hull tankers during cargo loading and 
discharging, and during ballasting. This concern has been 
generalised to include all ships of this type, and has not focused 
on the specific size and arrangement of ships where the prob- 
lems can arise — the single wide centre cargo tanks in ships 
between Panamax (45,000 tonnes dwt) and Suezmax (150,000 
tonnes dwt). 

This problem relates to intact stability characteristics rather 
than the damage stability criteria set out in MARPOL Annex I 
Regulation 13F. 

Prior to the advent of double hulls, tankers in this size range 
experienced a solid GM in the region of 4.0 metres in fully 
loaded conditions, and around 3.5 metres in fluid GM when all 
free surfaces were taken into account. 

When compared to the stability minimum GM _ of 
0.15 metres, it can be seen that the ship’s Master has a large 
reserve of intact stability providing a significant margin when 
loading, unloading and ballasting without any concern for loss 
of stability. 


4.3.2 Intact Stability 


It has been found in double hull tankers with wide centre tanks 
that the same reserve of stability may not exist due to: 


(i) the cargo centre of gravity (KG) being increased by the 
height of the double bottom, and 

(ii) the free surface effect of the large single centre tank 

arrangement. 


The combined effect of these factors may be in the order of up 
to 3.75 metres loss of GM which, when deducted from the initial 
GM of 4.0 metres, results in the statutory minimum being 
approached. 

Special attention and care will, therefore, need to be exer- 
cised during the loading, unloading and ballasting of these 
ships to ensure that adequate stability is maintained at all times. 

The problem becomes more acute at higher fill levels, espe- 
cially where there is a free surface of ballast water in the double 
bottom, resulting in a possible negative GM scenario and the 
ship taking on an angle of roll. 

Measures to reduce the effects of cargo free surface have 
been the inclusion of topside tanks with sloped plating and 
centreline bulkheads. 
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Whilst centreline bulkheads would seem a logical solution, 
it should be noted that such bulkheads can introduce large 
angles of heel in damaged conditions, and attract high global 
shear forces as the deadweight increases. 


4.4 Hot Cargoes 


The Rules allow the loading of hot oil cargoes in double hull 
oil tankers up to 65°C for sea temperatures of 0°C and below, 
and 75°C for sea temperatures of 5°C and above, without the 
need for any additional calculations. 

Where these temperatures are exceeded, then temperature 
distribution calculations require to be carried out. If any part 
of the longitudinal structure is shown to exceed the tempera- 
ture criteria above, then thermal stress calculations are needed. 

Thermal stress calculations are initially carried out for the 
standard Rule temperature of 65°C or 75°C as applicable, 
together with the Rule still water and wave bending moments, 
to establish the design stress and buckling criteria. 

The calculations are then repeated for the proposed carriage 
temperature and the actual still water bending moment, 
together with the Rule wave bending moment. 

For new ships, increases in plate scantlings or reduction in 
stiffener spacings may arise. For existing ships, a decrease in 
the permissible still water bending moment for the relevant 
condition may be assigned. 


5. CONSTRUCTION TOLERANCES 


With the development of primary structures constructed 
entirely in higher tensile steels, and the consequent reduction 
in general scantlings, it has become important for the Plan 
Approval Surveyor to have an awareness of the possible prob- 
lem areas in the ship’s structure, and indicate these to the 
attending Surveyor. 

Construction tolerances were originally developed for mild 
steel structures and are now applied to higher tensile steel 
structures. Their validity could be questioned. 

Figure 5.1 indicates alignments that would be allowed 
under present construction standards. All would be accepted, 
but obviously the centre configuration is the ideal. 

Figure 5.2 gives an example of an actual situation where this 
‘allowable’ standard has been applied. These areas would not 
give cause for concern if they occurred in areas of low stress. It 
can be seen, however, that if these occur in areas of high stress, 
a more rigid construction tolerance standard should be agreed 
between class and shipbuilder. 

In order to achieve this, the Surveyor should identify these 
‘critical areas’ and request the yard to apply a more rigorous 
standard. 
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All these configurations 
are within the present day 
constructional tolerances 
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Only one is in the 
design aligment 


Figure 5.1 
Alignment at cruciform joint 


In this respect, Lloyd’s Register’s attitude is that experience 
has shown that critical areas will vary depending upon the 
structural design and, therefore, the number and locations of 
critical joints will be a matter of consideration for each ship 
type. In making this assessment it will also be necessary to 
consider how the ship is to be constructed so as to differentiate 
between fabrication in the assembly shop and erection on the 
berth. 

These locations can then be indicated on the Midship Section 
plan to provide basic guidance to the shipbuilder and the 
attending Surveyor. It would not be intended that this would 
intrude on the general responsibilities involved in the ship 
construction. Identification of areas requiring special attention 
could then form an addendum to the general quality plan for 
that particular ship, such that appropriate building tolerances 
may be employed. The subject of critical areas is more fully 
discussed in Chapter 6. 

A study on construction tolerances applied by Classification 
Societies and Shipyards was carried out by the Tanker Structure 
Cooperative Forum. The tolerances attributed to Lloyd’s Regis- 
ter are shown in Appendix B for reference. 
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Figure 5.2 
Misalignment at bottom centre tank transverse bracket 
connection to longitudinal bulkhead 


6. CRITICAL AREAS IN DOUBLE HULL 
TANKERS 


6.1 General 


Critical areas within the tank structure of double hulled tankers 
can be defined as locations that, by reason of stress concentra- 
tion, alignment/ discontinuity and corrosion will have a higher 
probability of failure during the life of the ship than the 
surrounding structures. 

In respect to stress concentrations, these areas would be 
identified in the design phase using 2-dimensional and 
3-dimensional finite element techniques. However, previous 
experience with similar ship configurations and defects allows 
an evaluation of the structural areas exposed to higher stress 
that may also be susceptible to a higher degree of cracking 
and/or buckling, especially where accompanied by corrosion. 

Alignment and discontinuity defects are symptomatic of the 
construction process, and particular attention is necessary by 
the Surveyor in recognising the possible problems arising from 
the application of a particular alignment standard to an erection 
weld in any area subject to a higher in-service loading. Simi- 
larly, if this area is a possible site of increased corrosion, the 
joint in question has a higher failure potential. 

Corrosion sites are generally limited to horizontal surfaces. 
In cargo tanks, residual water from the cargo and from water 
washing will lie on transverse bulkhead horizontal girders and 
on the inner bottom. If these areas are left uncoated, which will 
generally be the case, then general wastage of this plating will 
occur. For the inner bottom, this will be more prominent 
towards the after ends of cargo tanks due to the ship’s natural 
condition in trimming by the stern. Inert gas systems have the 
tendency to reduce general wastage rates; however, the sulphur 
content in the gas may combine with residual water to produce 
a more corrosive fluid locally. 

In ballast tanks, a corrosion protection system will be applied 
consisting of an epoxy coating plus the possible addition of sacri- 
ficial anodes. Whilst the coating system is intact, no corrosion 
will occur, however, most coating systems will, in general, only 
be guaranteed for a specific period followed by a slow break- 
down of the coating. Where the coating breaks down, accelerated 
corrosion will occur. Coating breakdown is more likely at areas 
of stress concentration and areas subjected to cyclic loading caus- 
ing the structure to flex and shed its protective coating. Sacrificial 
anodes will be beneficial in arresting corrosion; however these 
are only effective when immersed in water. 


6.2 Stress Concentration Locations in Primary Structures 


6.2.1 General 


Stress concentrations occur in the primary structures of all oil 
tankers and are identified during the design process by such 
means as finite element calculations. The designer will modify 
the detail to alleviate the concentration either by redesign or 
increase in plate scantlings. However, even after modification 
that area will still, in general, be exposed to higher stresses 
throughout the life of the ship than surrounding areas. 

Atthe design appraisal stage, a plan of the primary structure 
can be prepared indicating these regions, and consideration can 
then be given by the production team into the appropriate 
methods of construction and the tolerances to be applied in 
order to remain within the assigned design parameters. 

In order to give an example of areas where these stress 
concentrations would be expected, the following sections give 
general information for double hull tankers with and without 
additional longitudinal bulkheads, as described in Chapter 3. 

Examples of critical areas are shown in Figures 6.1 to 6.7 indi- 
cating both stress concentration and areas prone to misalignment. 


Stress concentration 


[_] Misalignment 


Double bottom tanker 


Double hull tanker 


Figure 6.1 
Critical Areas in Midship Sections of smaller tankers 
below 20,000 tonnes dwt 


6.2.2 Smaller Double Hull Tankers 


The areas within the tank structure of double bottom tankers 
at which higher magnitudes of stress will occur are indicated 
in Figures 6.1 and 6.2 for a typical midship section and trans- 
verse bulkhead arrangement respectively. These can be stated 
as follows: 


Transverse Section (Mid-Hold) 
(i) Intersection of end brackets of transverse framing and 


primary webs with inner bottom plating and longitudinal 
bulkhead. 


Stress concentration 


] Misalignment 


Vertically corrugated 


Horizontally corrugated 


Figure 6.2 
Critical Areas in Transverse Bulkheads in smaller tankers 
below 20,000 tonnes dwt 


Transverse Bulkhead (Vertically Corrugated) 


(i) | Connections of corrugations to inner bottom. 
(ii) Connections of corrugations to deck. 


(iii) Connections of deck longitudinals to corrugations. 


Transverse Bulkhead (Horizontally Corrugated) 


(i) | Connections of corrugations to longitudinal bulkhead 
and inner hull. 
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6.2.3 Double Hull Tankers up to Suezmax 


The areas within the tank structure of double hull tankers at 
which higher magnitudes of stress will occur are indicated in 
Figures 6.3 to 6.5 for a typical mid-hold transverse section and 
a typical transverse bulkhead arrangement respectively. These 
can be stated as follows: 


Transverse Section (Mid-Hold) 


(i) Intersection of inner bottom and lower hopper sloping 


plate. 

(ii) Intersection of longitudinal bulkhead (inner hull) with 
lower hopper sloping plate. 

(iii) Side web lower panels above lower hopper especially in 
way of openings. 

(iv) Connection of deck transverse end bracket to longitudinal 
bulkhead or topside tank sloping plating. 

(v) Connection of topside tank sloping plate to longitudinal 
bulkhead. 

(vi) Side shell longitudinal connections to side web plating. 

(vii) Where centreline longitudinal bulkhead fitted, toes of 


vertical web brackets to inner bottom, and toes of brackets 
from deck transverse to bulkhead. 


Oh 


Figure 6.3 
Critical Areas in Midship Section of double hull tankers 
with no centreline bulkhead up to 150,000 tonnes dwt 


Transverse Bulkhead (Vertically Corrugated) 


(i) | Connection of lower stool to inner bottom plating. 

(ii) Connection of lower stool to lower shelf plate. 

(iii) Connection of vertical corrugations to lower stool plate. 
(iv) Connection of vertical corrugations to upper stool plate. 


(v) Connection of longitudinal deck girder system to upper 
stool. 


(vi) Connection of upperand lower shelf plates to side structure. 


Figure 6.4 
Critical Areas in Midship Sections of double hull tankers 
with centreline bulkhead up to 150,000 tonnes dwt 
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Figure 6.5 
Critical Areas in Transverse Bulkhead of double hull 
tankers up to 150,000 tonnes dwt 


Transverse Bulkhead (Plane) 


(i) Connection of vertical stiffening to inner bottom. 
(ii) Connection of vertical stiffening to horizontal stringers. 
(iii) Connection of horizontal stringers to side girders. 


(iv) Connection of inner bottom and bottom shell longitudinals 
to floors in way of lower stool. 


6.2.4 VLCC Double Hull Tankers 


The areas within the tank structure of double hull tankers at 
which higher magnitudes of stress will occur are indicated in 
Figures 6.6 and 6.7 for a typical mid-tank length transverse 
section and a typical transverse bulkhead arrangement respec- 
tively. These areas can be stated to be as follows: 


Transverse Section (Mid-Tank Length) 


(i) Intersection of inner bottom and lower hopper sloping 
plate. 


(ii) Double bottom floor panels at hopper and longitudinal 
bulkhead. 


(iii) Intersection of inner hull at side with lower hopper slop- 
ing plate. 


(iv) Side web lower panels above lower hopper especially in 
way of openings. 


(v) Longitudinal bulkhead vertical transverse end bracket 
connection to inner bottom. 


(vi) Primary bottom bracket web toe connections to inner 
bottom and longitudinal bulkhead. 


(vii) Connection of wing cargo tank cross-tie to inner hull at 
side. 


(viii) Connection of deck transverse end bracket to inner hull 
at side. 


(ix) Bottom and inner bottom longitudinal connections to 
double bottom floor pillar stiffeners. 


(x) Side longitudinal connections to side webs particularly in 
region between ballast and load waterlines. 


Transverse Bulkhead (Plane) 


(i) Connection of horizontal stringers to longitudinal bulk- 
head and inner hull at side. 


(ii) Connection of vertical stiffening to horizontal girders and 
inner bottom. 


(iii) Connection of inner bottom and bottom shell longitudi- 
nals to floor in way of transverse bulkhead. 


(iv) Connection of side shell and inner hull longitudinals to 
transverse bulkhead in double side. 


6.3 Misalignment during Construction 


The very nature of shipbuilding requires the assembly of a 
multitude of structural components into blocks within an 
assembly shop and then the erection of these blocks within a 
building dock. The welded interface between structural 
components in sub-assembly areas can be reasonably 
controlled; however, the welded connections between large 


prefabricated blocks on the building berth cannot be so easily 
controlled due to the sheer size of the blocks being handled. 

The most critical type of joint is the welded cruciform joint 
where it is subjected to high magnitudes of tensile stress normal 
to the table member of the joint. 

In double hull tanker designs, the double side and double 
bottom construction lends itself to the block construction. The 
interfaces between these blocks and those formed by the 
primary transverse structure may lie in areas of high stress. 
Critical cruciform joints are also found within the prefabricated 
blocks and also require close attention to alignment, but this is 
more easily achieved. 

It can readily be seen that the combination of stress concen- 
tration and misalignment is to be avoided. 


Stress concentration 


Misalignment 


Figure 6.6 
Critical Areas in Midship Sections of double hull tankers 
above 150,000 tonnes dwt 
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6.4 Corrosion Trends 


6.4.1 General 


Corrosion of internal structure will occur on double hull 
tankers if not adequately protected, particularly in salt water 
ballast tanks. Further, the fitting of a permanent access arrange- 
ment for inspection and maintenance during the life of the ship 
requires advance knowledge of the areas within the tanker 
structure at higher risk from corrosion wastage. The areas, 
where the double hull tanker would be particularly exposed to 
corrosion, are highlighted below. 


6.4.2 Cargo Tanks 


The cargo tanks will most likely only carry cargo oil throughout 
the ship’s service life, although designated cargo tanks may be 
used for heavy weather ballast in emergency situations. The 
corrosion risk within these tanks is, therefore, normally very 
low except in the following specific areas: 

(i) |The deckhead vapour area may be subjected to atmo- 
spheric corrosion by water vapour. 

(ii) The water settling out from the cargo oil corrodes the 
upper surface of horizontal surfaces in the cargo tanks 
such as bottom plating and horizontal stringer web plat- 
ing. 

For the coated cargo tanks, the horizontal surface 
wastage, particularly the inner bottom, takes the form of 
localised pitting and grooving in way of coating failure. 


(iii) 


(iv) For the uncoated cargo tanks, this wastage is more 


uniform in general. 


6.4.3 Double Hull Vertical Wing Space 


Lloyd’s Register’s requirement to coat the ballast tanks 
certainly preserves the structural integrity from corrosion 
wastage, except in those areas where coatings have broken 
down. 

The corrosion rate in coating breakdown areas will likely be 
accelerated and needs to be dealt with on a timely basis. 

Since the double hull is designated to carry the water ballast, 
the corrosion trends are similar to the wing water ballast tank 
of the single hull tanker. 

Due to the narrow width of wing space and the cellular 
construction, atmospheric corrosion within the upper spaces 
will be more significant. 

At the forward and after parts of the ship, where the hull 
takes shape, and the longitudinal bulkhead and other internal 
structural members converge into a confined space, it is more 
difficult during construction to gain access for painting. The 
possible inadequacy of surface preparation and coating appli- 
cation in these areas leads to a higher probability of coating 
breakdown during the ship’s life. 

The necking effect to the longitudinal bulkhead plating is 
more noticeable on high tensile steel plating, and is more 
susceptible to coating breakdown, particularly if the adjacent 
cargo tank is heated. 


6.4.4 Double Bottom Space 


The deck head of the inner bottom and the bottom plating are 
more susceptible to coating breakdown. The junctions where 
the inner bottom plating is connected to the sloped or knuckled 
longitudinal bulkhead, at forward and after parts of the ship, 
are also more susceptible to coating breakdown. 


6.5 Fatigue Considerations 


The side shell area between load and ballast waterlines is 
subjected to the highest cyclic loading throughout the ship’s 
life due to the passage of waves along the side of the ship. 

The fatigue fractures in side longitudinal connections of 
higher tensile construction in certain single hull VLCCs has 
now been well documented, and constructional details in way 
of these connections to increase fatigue life are now incorpo- 
rated by many shipyards as standard. 

These details include the incorporation of soft-toed pillar 
stiffeners with either soft-toed backing brackets or reversed 
radii at the heel of the pillar stiffener (see Figure 6.8). 

It is, therefore, important that due consideration be given to 
this detail at the design stage to reduce the risk of fatigue crack- 
ing during service. The Rules and the ShipRight Fatigue Design 
Assessment procedures address this problem. 


Crosstie in centre tank 


6.6 Areas in Double Hull Tankers requiring Special 
Attention 


6.6.1 General 


In general, the risk of corrosion and structural defect experi- 
enced in single hull tankers are still valid and applicable to 
double hull tankers. However, narrow vertical wing spaces and 
double bottoms create some unique critical areas which need 
to be periodically inspected, repaired and maintained through- 
out the ship’s service life. The following areas are deemed more 
prone to defects. 


6.6.2 Cargo Tanks 
(i) |Deckhead: corrosion and fractures. 


(ii) 


Buckling in web plate of the underdeck web frame. 


Crosstie in wing tank 
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Stress concentration 
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Figure 6.7 
Critical Areas in Transverse Bulkheads of double bottom hull tankers above 150,000 tonnes dwt 
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(iii) 


(vi) 


(vii) 


6.6.3 


(i) 


(ii) 


(iii) 


(iv) 


(v) 


(vi) 


6.6.4 
(i) 
(ii) 


(iii) 


Transverse bulkhead horizontal stringers: fractures in 
way of cut-outs and at end bracket toe connection to inner 
hull and longitudinal bulkhead. 


Longitudinal bulkhead transverse web frames: fractures 
at end bracket toe connection to inner bottom. 


For plane transverse bulkheads, transverse bulkhead 
vertical stiffeners connected to inner bottom. For verti- 
cally corrugated bulkheads, corrugation connection to 
lower shelf plate and bulkhead plating connection to 
inner bottom. Fractures caused by misalignment and 
excessive fit-up gap. 


Transverse bulkheads at the forward and after boundaries 
of the cargo space: fractures in way of inner bottom. 


Pitting and grooving of inner bottom plating. 


Double Hull Vertical Wing Space 
Corrosion of deckhead. 
Coating breakdown of inner hull plate and stiffener. 


Buckling of web plate in the upper and lower part of web 
frame. 


Fractures at the side shell longitudinal connection to web 
frames. 


Corrosion and fractures at knuckle joints in inner hull at 
forward and after part of ship. 


Corrosion and fractures at the juncture where the sloped 
inner hull is connected to the inner bottom. 


Double Bottom Space 
Deckhead corrosion at inner bottom. 
Bottom corrosion wastage. 


Cracks at inner bottom longitudinal connection to double 
bottom floor web plating. 
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Figure 6.8 
Side shell longitudinal connection to transverse web 


7. CORROSION PROTECTION OF TANKS 
7.1 General 


It is necessary to emphasise the fact that effective corrosion 
control in segregated water ballast spaces, such as those envis- 
aged in double hull designs, is probably the single most 
important feature, next to the integrity of the initial design, in 
determining the ship’s effective lifespan and structural reliabil- 
ity. Inadequate corrosion protection of the internal structure in 
these spaces at the newbuilding stage could lead to significant 
problems for the shipowner in trying to maintain its structural 
integrity when in service, and thus keep to the principal objective 
of avoiding oil pollution. Corrosion rates in water ballast tanks 
where the protective coatings have broken down are known to 
be very high, particularly when associated with repeated heavy 
weather conditions, and high atmospheric temperatures. 

It has been ascertained that excessive corrosion of ballast 
spaces has caused several major hull structural failures in recent 
years. To combat this trend the International Association of Clas- 
sification Societies (IACS) agreed to make the coating of ballast 
tanks which have at least one boundary on the hull envelope a 
condition of class. This requirement became effective in January 
1992. In respect to the cargo tanks, there are no classification 
requirements for the steelwork to be protected, and this is a 
matter of contract between shipowner and shipbuilder. 

The coating of ballast tanks isa class requirement, and resulted 
in the descriptive notation PCWBT (protective coating water 
ballast tank) being assigned, now ShipRight PCWBT. Failure to 
maintain the coating results in this notation being placed in paren- 
theses and the ship reverting to annual survey of ballast spaces. 

It should be emphasised that the Surveyor is not required to 
inspect the coating system, but only to ascertain that the ballast 
tanks are coated. It is the responsibility of the owner and ship- 
builder to verify that the coating system is applied in accordance 
with the manufacturer’s recommendations. 

Specifications for larger ships increasingly request for struc- 
tural steelwork, including ballast tanks, to have an extended 
working life. This expectation must overcome the difficulties of 
recoating the complex steelwork in service when necessary, espe- 
cially in double hull vessels, and the reduction of corrosion 
margin in highly stressed regions. 

Superior types of coal-tar epoxy coatings are, perhaps, the 
most common type of protection now being offered on most 
newbuildings. In addition, some manufacturers offer single coat 
dry film thickness of 400 microns without sagging. Coatings are 
offered in light, beige or green colours which are said to make 
application easier in tanks, including dark zones with restricted 
access. Detection of defects is also improved with the use of light 
coloured coatings. These types will become even more popular 
due to the newly-developed modifiers which are claimed to elim- 
inate the carcinogenic effect normally associated with tar epoxy 
coatings. Experience has shown that, with a good standard of 
application, these coatings have given successful protection for 
well over ten years service life, but are prone to localised break- 
down in way of ‘sharp edges’ and ‘surface defects’ which can 
then lead to accelerated corrosion of the steel structure. Provided 
that this localised breakdown is not too extensive, the coating 
can usually be sustained by periodic touch-up or by additional 
protection from ‘low-level’ cathodic protection systems. 

Coatings with spraying characteristics at ambient tempera- 
tures down to 10°C are normally offered. However, some 
shipyards have experienced problems with spraying coatings in 
winter conditions when the temperature falls below this value. 
For this reason, manufacturers are striving to develop cold 
weather versions of these coatings for application at tempera- 
tures down to -5°C. It is understood some such coatings are 
already on the market. 

Zinc silicates have, on occasions, been used for ballast tank 
protection and, with their ‘light’ colouring, are excellent for 
inspection in service, but experience has found these coatings to 


be of limited lifespan due to their gradual erosion when perma- 
nently immersed for long periods in sea water. 

By their very nature, paint coatings are intended to form a 
barrier between the sea water and the steel surfaces; therefore, 
it is the degree of permeability of the particular coating which 
will determine its effectiveness. This permeability is reflected in 
the type of material being used and the thickness to which it is 
applied, and successful adhesion to the steel structure is of vital 
importance. It is for this reason that so much attention has to be 
given to the quality standards of surface preparation and condi- 
tions of coating application. 

The attainment of good quality tank coatings usually rests 
with the shipowner’s supervision of the newbuilding contract, 
and he will be wary, on one hand, of possible minimum stan- 
dards being presented by the shipbuilder whilst, on the other, of 
unrealistic requirements by the paint manufacturer’s represen- 
tative. Final judgement on acceptance criteria should be agreed 
amongst all parties, and be tempered with appreciation of the 
building schedule and construction procedure planned for the 
ship. The likely results of any compromise in agreed standards 
should be clearly understood and form the basis of the perfor- 
mance guarantee and any subsequent claims for defects. 

Lloyd’s Register states only that: 


“All saltwater ballast spaces having boundaries formed by the 


hull envelope are to have a corrosion protection coating applied ~* 
§ 


in accordance with the manufacturer’s requirements. Recom- 
mended coatings are published by Lloyd's Register in the 
‘Guidance Notes for Surface Preparation and Application and 
Maintenance of Tank Coatings”. 


7.2 Double Hull Structures 


With the cellular type of construction now associated with 
double hull designs, application of internal coatings should, in 
theory, be relatively easy to integrate within the building 
programme to achieve a high quality standard, especially when 
carried out at the ‘block’ stage under the controlled conditions 
of painting cells. In practice, however, this is not always the case, 
and many of the benefits of improved access and ventilation for 
good painting can be wasted by poor standards of surface prepa- 
ration and cleanliness. Furthermore, extensive mechanical 
damage to the paint coating can be incurred during erection as 
a result of bad design planning or a ‘rushed’ building schedule. 

It is extremely important, therefore, that due consideration 
be given within the design and planning schedule to achieving 
the best possible standard of coating application by doing this 
either at the block’ stage in painting cells or in situ after final 
completion of the hull structure. 


7.3 Coating Survey 


Under the requirements of the Enhanced Survey Programme for 
Oil Tankers, the coating system is a surveyable item and m 4st be 
judged by the attending Surveyor against the following cri 


GOOD condition with minor spot rusting; 


- 


FAIR condition with local breakdown at edges of stiffeners 
and weld connections and/or light rusting over 20% or 
more of areas under consideration, but less than as 
defined for POOR condition; 

POOR condition with general breakdown of coating over 20% 


or more of areas, or hard scale at 10% or more of areas 
under consideration. 


Where the coating system is found to be poor and the owner 
elects not to renew the coating, then that tank will require to be 
inspected annually. 

Examples of the coating categories are shown in Figures 7.1 
to 7.3 
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Figure 7.1 
GOOD coating condition with minor spot rusting 


Figure 7.2 
FAIR coating condition with local breakdown and light rusting 
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Figure 7.3 
POOR coating condition with general breakdown 


8. STRUCTURAL APPROVAL PROCESS 
8.1 General 


It is not intended to go into detail of the hull plan approval 
process, but to give a general overview as a reference to the 
Surveyor. 

The main scantling plans, as required by Part 3, Chapter 1, 
Section 5.2 of the Rules, are submitted to the nearest authorised 
plan approval office for appraisal, together with supporting 
calculations where necessary. 

The main parts of the Rules used for approval are Part 4, 
Chapter 9, “Oil Tankers”, together with certain aspects of Part 4, 
Chapter 1, “General Cargo Ships”, and the majority of Part 3 
of the Rules in respect to general scantling approval. 

The approval process is carried out in specific stages, gener- 
ally applicable to all ship types, as follows: 


(i) | Midship Section modulus calculation, determination of 
permissible still water bending moments and establish- 
ment of excess modulus, scantling reduction factors and 
higher tensile steel factors (where applicable). 

(ii) Approval of longitudinal elements of the ship, i.e. deck, 

shell, bottom, inner hull and longitudinal bulkhead plat- 

ing and secondary stiffening. 

(iii) Approval of transverse and swash bulkhead plating and 

stiffening. 


(iv) Approval of primary structure, i.e. transverse web 
frames, girders and stringers by direct calculations. This 
would normally entail finite element analysis, except for 


smaller ships. 


(v) Approvaland return of Midship Section and typical trans- 
verse bulkheads, together with Midship Section 
endorsement letter stating applicable class notation and 


basis of hull appraisal. 


(vi) Approval of remaining primary plans, i.e. profile and 


decks, shell expansion, rudder and sternframe. 
(vii) Approval of preliminary loading manual from strength 
aspects. 


(viii) Approval of secondary plans, i.e. fore end construction, 
aft end construction, machinery space and superstruc- 


ture. 
(ix) Approval of equipment number. 
(x) Approval of final loading manual. 


The above gives the general approval flow path, but will, in 
most cases, involve a number of resubmissions of plans before 
final approval. Additional calculations may be carried out with 
respect to sloshing at partial fills, carriage of hot cargoes and 
carriage of certain chemical cargoes. 


8.2 Finite Element Analysis 


The Rules for double hull tankers in Part 4, Chapter 9, generally 
require that direct calculations be carried out for all double hull 
tanker primary structure. For tankers in excess of about 20,000 
tonnes dwt, structural analysis will be carried out using either 
full plate analysis or grillage analysis where considered suffi- 
cient. 

An example of a three-dimensional finite element analysis 
for a double hull VLCC is shown in Figure 8.1. This analysis 
covers an extent of one and a half cargo tanks, and half the 
breadth. This extent has been chosen as it represents all the 
main design features, and prevents any local effects from 


boundary conditions on the primary webs under considera- 
tion. 

In addition, fine mesh analysis may be carried out on a 
particular feature such as the hopper knuckle. This is specifi- 
cally relevant where no service experience exists for this detail 
or where stress range magnitudes for fatigue analysis are 
required. 

Lloyd's Register has published guidance notes detailing the 
methods and procedures to be adopted for the direct calcula- 
tion of oil tanker structures. These are published in the 
“Guidance Notes on Direct Calculations : Primary Structure of 
Tankers”. 

At the present time, Lloyd’s Register uses the finite element 
program NASTRAN on the mainframe and LRSTRAND on PC. 


8.3 Critical Areas 


As discussed in Chapter 6.2, the plan approval Surveyor will 
indicate on the scantling plans areas considered to require 
particular attention during survey under construction, espe- 
cially where higher constructional tolerances have been 
assigned as a result of the stress and/or fatigue analysis. 


8.4 Fatigue Analysis 


For ships in excess of 190 metres, the ShipRight Fatigue Design 
Assessment (FDA) procedure is mandatory. In practice, most 
owners are requesting the assignment of this notation for ships 
less than 190 metres, and authorised plan approval offices will 
be carrying out fatigue assessment on a regular basis as they 
now do for sloshing analysis. 


8.5 Legislation 


During initial approval, the requirements of MARPOL Annex I 
Regulations 13(2), 13E, 13F, 22, 23 and 24 are applied and the 
shipyard advised of any discrepancies and amendments 
required. In addition, the general arrangement and sections in 
the engine room in way of fuel oil tanks will be checked for 
compliance with USCG requirements. Where any doubt exists, 
the USCG will be contacted for interpretation. 


8.6 Loading Instruments 


It is a requirement of Part 3, Chapter 4, Section 7.2 of the Rules 
that all tankers be fitted with a loading instrument unless the 
ship will only operate with designated loading conditions that 
have been approved by Lloyd’s Register. 

The loading instrument must be of a type approved for the 
sea environment and calibrated by the manufacturer in the 
presence of the Surveyor. 
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Figure 8.1 
Finite element analysis model of VLCC double hull tanker 
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9. CLASS NOTATIONS 


In general, the following class notation could be applicable to 
the majority of double hull oil tankers building today: 


#100A1 Oil Tanker (Double Hull) ESP 
ShipRight SDA, FDA, CM 

with descriptive notation: 

Part Higher Tensile Steel, SBT(LR), PL(LR), IGS 

ShipRight PCWBT HCM, ES+1, SEA, SERS. 


The individual notations are as follows: 


100 


Oil Tanker 
Double Hull 


ESP 


ShipRight 


SEA 
SERS 
SBT(LR) 


PL(LR) 


IGS(LR) 


Constructed under LR’s Special Survey 
Seagoing ship: 


Built/accepted into class and maintained in 
good and efficient condition 


Mooring equipment to Rule 
Complies with Part 4, Chapter 9 of the Rules 


Complies with Part 4, Chapter 9 of the Rules 
and MARPOL Annex I Regulation 13F 


Enhanced Survey Programme in accordance 
with IACS UR Z10.1 and LR’s Rules. 


Compliance with LR’s ShipRight procedures as 
follows: 


SDA Structural Design Assessment 

FDA Fatigue Design Assessment 

CM Construction Monitoring 

PCWBT Protective Coating Water Ballast 
Tanks 

HCM Hull Condition Monitoring 

ES+1 Enhanced Scantlings 
(+1 indicates an additional 1mm to 
deck and shell plating) 

Ship Event Analysis 


Ship Emergency Response System 


Segregated Ballast Tanker in compliance with 
MARPOL 73/78 Annex I Regulation 13. LR 
signifies certification by LR. 
Protected locations in accordance with 
MARPOL 73/78 Annex I Regulation 13(E). LR 
signifies certification by LR. 


Inert Gas System. LR signifies certification by 
LR. 


Where the ship also complies with the IBC Code for the carriage 
of chemicals, the following class notations may be applicable:- 


*100A1 


*100A1 


Oil and Chemical Tanker (Double Hull), Ship 
Type 3, ESP, in association with a list of defined 
cargoes 


or 


Chemical Tanker (Double Hull), Ship Type 3, in 
association with a list of defined cargoes and 
oil cargoes. 
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The remaining notations of ShipRight, etc., would also be appli- 
cable where relevant. 

In respect to the ShipRight notations, it should be noted that 
SDA, FDA and CM are mandatory where the ship’s length 
exceeds 190 metres. If the ship is less than 190 metres in length 
and these notations were requested, then they appear as 
descriptive notations and not class notations. 

Individual technical procedures for all ShipRight notations 
have been produced, together with appropriate PC software 
where applicable. 


10. TANK SPACE ACCESSIBILITY FOR 
INSPECTION AND MAINTENANCE 


10.1 General 


The International Association of Classification Societies 
requires that means are to be provided to enable the Surveyor 
to examine the structure in a “safe and practical way”. 
However, there are no specific classification rule require- 
ments, at present, that detail the methods by which this should 
be achieved. It has been the owner’s responsibility to negoti- 
ate with the shipbuilder, at the time of construction, the 
development and incorporation of a proper system of access 
and walkways to enable efficient and effective future inspec- 
tion and maintenance. However, the time has come for all 
parties to insist on ‘Inspection-friendly’ tanks, as it is obvious 
that with a little more planning and additional initial expen- 
diture, great benefit can be obtained by all if better means of 
access are incorporated in the design for all structure to be 
properly and closely examined. 

Traditional tankers include the large open cargo spaces, 
whilst double hull tankers include such large spaces as well 
as closed cellular water ballast spaces. Whilst well established 
methods have been devised for large wide cargo spaces, 
special attention needs to be given to the cellular water ballast 
spaces, taking into consideration the knowledge of critical 
areas in the tank structure as previously discussed. 


Rescue hatch 
(600 x 800 mm or larger) 


10.2 Basic Access Requirements 


The double hull tanker necessitates ease of access to permit 
frequent and easy inspection of the ballast tanks to ensure that 
any coating failures, and subsequent corrosion and fractures, may 
be dealt with ona timely basis. Accessibility to afford the removal 
of injured personnel should also be a prime consideration. 

Access to vertical wing and double bottom spaces of ballast 
tanks, cofferdams and other non-cargo spaces within the cargo 
tank area must be provided directly from the weather deck. Every 
double bottom space should be provided with separate access, 
without passing through other neighbouring double bottom 
spaces. Where the tanks are of confined or cellular construction, 
two separate means of access from the weather deck would be 
recommended, and these should be provided at either end of the 
tank space. One enlarged hatch of 600mm by 800mm minimum 
clearance, or larger, would be fitted on the weather deck for rescu- 
ing injured personnel directly from the double bottom space. 

Vertical access openings provided for each cellular space in 
double bottom or vertical wing should have at least one 
enlarged manhole opening of 600mm width by 800mm height 
minimum clearance, and the sills of these openings should not 
be more than 600mm above the standing surface or foothold. 
At least one horizontal access opening, 600mm by 800mm, or 
larger size, should be provided in each cellular space in the 
vertical wing space (see Figures 10.1 to 10.3). 


600 x 800 mm 
or larger 


Or 
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Figure 10.1 
Access through wing ballast space and double bottom 


1S?) 


ol 


Manhole/Rescue Hatch Rescue hatch Tank cleaning 
(600mm x 800mm) or larger hatch 
Side shell 
Inner hull 
= g 


Figure 10.2 
Access arrangement through deck into wing ballast space 
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Figure 10.3 
Access through double bottom 
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Figure 10.4 
Purging arrangements for double bottom space 
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Figure 10.5 
Different methods of vertical access in wing ballast spaces 


Safety guide rails should be fitted on the free edge of the 
walkways, and gratings or guide rails should be fitted for 
openings larger than 300mm diameter on bulkhead stringers 
and horizontal girders. 

Tank coatings of lighter colour should be considered for 
the double hull ballast tanks to provide improved visibility 
for the detection of corrosion fractures and cargo oil leakage. 

In order to provide a safe environment for inspection and 
maintenance, it is essential that fresh air be circulated 
throughout the double hull. Due to the cellular construction 
of the double hull tanker, noxious or flammable gases may 
accumulate, thereby necessitating that proper means of venti- 
lation be provided. One method of tank venting is by using 
an exhaust fan mounted on the purge pipe to remove air from 
the double bottom space and let the fresh air gravitate down 
into the tank through the open tank hatches on deck. The 
purge pipe should ideally extend from the upper deck to the 
double bottom space and be lead inboard to the ship’s centre- 
line (see Figure 10.4). 

The conventional access methods for the inspection of tank 
structures include the following (see Figures 10.5 to 10.11):- 


(i) | Permanent access arrangement by the fitting of: 
(a) Permanent staging. 
(b) Bulkhead stringers as walkways. 


(c) Horizontal girders as walkways. 


2 


“N 


(d) 
(e) 
(f) 


Independent horizontal walkways. 
Oversize longitudinals as walkways. 


Step rungs on the faceplates of longitudinals for 
climbing. 


Vertical climbing bars on the faceplates of longitudi- 
nals to assist in climbing. 


(g) 


(h) Vertical or inclined ladders on the faceplates of longi- 


tudinals for climbing. 
(i) Vertical ladders on transverse bulkheads. 


(j) Steprungsand grip rails on sloped or curved surfaces 
to assist footing. 


(k) Permanent lugs, clips and pad eyes for temporary 


staging or portable staging support. 
(ii) Temporary staging. 
(iii) Portable staging /mobile platform. 
(iv) Use of mountain climbing gear. 
(v) Free climbing. 
(vi) Rafting. 
(vii) Remotely operated vehicles. 


(viii) Use of divers. 


Independent walkways Oversize longitudinals 


Guard rail 
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Figure 10.6 
Horizontal Walkways in wing ballast spaces 
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Figure 10.7 
Access through vertical webs in wing ballast tank 


10.3 Cargo Tank 


For open tank structures the most convenient and favoured 
means of inspection is ‘rafting’ and ‘climbing’ as the predom- 
inant method. 

In addition, the following should be provided: 


(i) | Permanent staging at strategic locations below deckhead 
to monitor the possible structural fractures, corrosion and 
cargo heating coil condition. 


(ii) 
(iii) 


Permanent walkways. 


Large access openings in swash bulkheads and centreline 
girders for raft passage, where feasible. 


38 


Midships 


Figure 10.8 
Vertical ladder on transverse bulkhead in wing ballast space 


Forward 


Figure 10.9 
Inspection ladders in fore and aft wing ballast tanks 


10.4 Vertical Wing Space 


Rafting in the double hull vertical wing space is not considered 
practical and is deemed unsafe. Permanent access arrangement 
should, therefore, be provided in these spaces. Permanent 
walkways with ladders would be the most desirable, and where 
these are formed by horizontal girders or enlarged longitudi- 
nals, as opposed to purpose-built walkways, would provide 
for the maximum service life. 


10.5 Double Bottom Space 


The structural design of the double bottom plays a large part 
in the accessibility of the double bottom. If the double bottom 
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Step rung and grip rail on inclined girders at ends of cargo area 


has insufficient height, it will be difficult to traverse. On the 
other hand, if it is too high, inspection and maintenance of the 
double bottom overhead area would become more difficult. 
A double bottom height between 2.0 and 3.5 metres is consid- 
ered the most practical; however, from structural aspects this 
would not be design efficient in small tankers, and for large 
tankers a height of up to 6.0 metres has been proposed. 

Adequate vertical access openings in the longitudinal and 
transverse primary structure should be included to provide 
ease of access to all parts of the double bottom for inspection 
and possible removal of injured personnel. 
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Figure 10.11 
Step rungs on curve plate 


11. SURVEY OF STRUCTURE 
11.1 General 


From the new construction stage of a tanker through to the 
eventual decision to withdraw the ship from service, the ship’s 
hull structure must be monitored by a series of internal and 
external inspections to assess its continuing integrity. The inten- 
sity of the inspection into the areas to be surveyed and the 
frequency of close-up examinations must ensure that an effec- 
tive maintenance programme can be carried out throughout 
the ship’s life. The normal frequency and intensity of inspection 
is already identified in the Rules and Survey Procedures 
Manual, and depends on the age of ship. 

The intended goals of the inspection should be to identify 
the following: 


(i) corrosion trends 
(ii) 


(iii) short-term repair requirements 


problem areas for corrosion, cracking and buckling 


(iv) long-term maintenance and repair requirements. 


In order to achieve these goals, the inspection needs to have 
four distinct phases, namely: 

(i) Planning 

(ii) 
(iii) Analysis 


Execution 
(iv) Repair and Maintenance 


11.2 IACS Unified Requirements 


During the deliberations that have taken place at IMO in the 
course of formulating MARPOL Regulations for double hull 
tankers, strong emphasis was placed on the need to increase 
the frequency and intensity of structural surveys of cargo and 
ballast spaces on existing tankers. The approved Regulation 
13G of MARPOL 73/78 Annex | asks for oil tanks to be subject 
toanenhanced programme of inspections during Special, Inter- 
mediate and Annual surveys. To this end, IMO invited IACS 
to propose guidelines for the implementation of this Regula- 
tion. Following extensive consultation with the industry and 
full and open discussions with OCIMF (the Oil Companies 
International Marine Forum) and Intertanko, [ACS responded 
by producing a comprehensive Unified Requirement (UR) 
which was submitted to IMO for consideration. 

IACS Council decided that member Societies will phase in 
these requirements at the earliest possible date commencing 
January 1993. 

The new UR enhances the existing Rule requirements for 
surveys and incorporates the following main principles: 


11.2.1 Survey Schedules 


The Special Survey requirements at 5 yearly intervals are 
intended to result in a standard of ship that will be suitable for 
trading until the next Special Survey, without significant struc- 
tural problems, provided a policy of prudent operation and 
adequate maintenance is followed by the owner. 

However, due toa high variation on the rate of deterioration 
experienced with older ships, the Special Survey is supple- 
mented by means of Intermediate and Annual Surveys to 
provide a more frequent inspection schedule. 


40 


11.2.2 Extent of Surveys 


In addition to requirements stipulated in Regulation 10 of the 
Protocol of 1988 relating to the International Convention for 
the Safety of Life at Sea 1974, Cargo Ship Safety Construction 
Certificate and existing Classification Rules, the surveys are to 
be enhanced to include: 


(i) | AtSpecial Surveys (every 5 years): An Overall and Close- 
up Survey, including thickness measurements of all areas 
subject to corrosion, cracking and buckling, with the 
extent of inspection increasing with age of ship. 


A requirement for a dry-dock survey to be held in 
conjunction with the Special Survey, which will provide 
the most suitable location to assure the proper quality of 
the survey. 
(ii) At Intermediate Surveys (at 2nd or 3rd anniversary): An 
Overall and Close-up Survey, including thickness 
measurement as necessary, of salt water ballast tanks to the 
same extent as required for the previous Special Survey. 
For ships more than 10 years of age an Overall and Close- 
up Survey will be required for selected cargo oil tanks. 
(iii) At Annual Surveys: An examination of salt water ballast 
tanks without coating or where coating was found ts be 
deteriorated and not renewed at previous surveys. 


11.2.3 Preparation for Surveys 


Requirements are given for the preparation for surveys, includ- 
ing requirements for access, lighting, gas freeing and survey 
equipment. 

Requirements for planning and preparation of the Survey 
Programme to include a reference to previous damage and 
repair history are also stated. 


11.2.4 Thickness Measurements 


Principles for the certification of companies performing the 
thickness measurements are stated, together with the require- 
ments for the extent, intensity, areas for measurement and 
standard procedures for reporting the measurements. 


11.2.5 Reporting 


Standard principles for reporting, indicating the extent, results 
and actions of the survey are given. 

An Executive Hull Summary reviewing the main findings 
is required to provide a condition assessment of the ship. 


11.2.6 Documentation Onboard 
Recommendations for documentation to be available onboard 
are to include: 
(i) Survey Report File with 
— Survey Reports, 


- Executive Hull Summary, including a condition 
assessment, 
- Thickness measurement report. 
(ii) Supporting Documentation with 
— Structural plans 


- Cargo and ballast history, 


Previous repair history, 


Table 11.1 Thickness Measurement - Oil Tankers 


Minimum Requirements 


Special Survey | 
Age < 5 years 


1) — One section of deck plating 


for the full beam of the ship 
within 0.5L amidships (in 
way of a ballast tank, if any, 
or a cargo tank used 
primarily for water ballast 


2) — Measurements for general 


assessment and recording 
of corrosion pattern of the 
different structural members 
subject to Close-up Survey 
in accordance with 

Table 11.2 


3) - Suspect areas 


Special Survey Il 


5 < age < 10 years 


Special Survey Ill 
10 < Age < 15 years 


Special Survey IV 
Age > 15 years 


1) — Within the cargo tank length 


or 0.5L amidships 
whichever is the greater 


a) Each deck plate 
b) One transverse section 
2) — Measurements for general 


assessment and recording 
of corrosion pattern of the 


different structural members 
subject to Close-up Survey 


in accordance with 
Table 11.2 


3) — Suspect areas 


4) - Selected wind and water 
strakes outside the cargo 
tank length 


— Inspection and reporting by ship’s personnel, 
— Extent of use of inert gas plant, 


— Survey plan. 


The Survey Report File should also be available at the Owner's 
and Classification Society’s offices. 

In order to unify, as far as practicable, procedures for thick- 
ness measurement of tanker structure, [ACS also produced UR 
Z 10.1 (17.7.92). This standardised the method of recording of 
measurements and the reporting format to be used. Diagrams 
and notes are included to ensure consistency of terminology 
between Classification Societies regarding structural items and 
locations on the ship. A summary of the minimum requirements 
and close-up survey requirements from the first through to the 
fourth and subsequent Special Surveys is given in Tables 11.1 
and 11.2 and Figures 11.1, 11.2 and report form in Figure 11.3. 


11.2.7 Other Features 

Other salient features of the Guidelines are summarised as 
follows: 

(i) Definitions. 


These include the meaning of ‘close-up survey’ which is 
indicated to be within close visual inspection range of the 
Surveyor, preferably within reach of hand. Also defined 
is the meaning of ‘Good’, ‘Fair’ and ‘Poor’ (see Chapter 
7.3). This will avoid the wide scatter of personal interpre- 
tation of defects. 

(ii) 

(iii) 

(iv) 


(v) 


Extent of Overall and Close-up Survey. 
Extent of thickness measurement. 
Extent of tank testing. 


Requirements for Annual, Intermediate and Special 
Surveys. 


1) — Within the cargo tank length 


or 0.5L amidships 
whichever is the greater 


a) Each deck plate 


b) Two transverse sections 


2) - Measurements for general 


assessment and recording 
of corrosion pattern of the 
different structural members 
subject to Close-up Survey 
in accordance with 

Table 11.2 


3) — Suspect areas 


1) — Within the cargo tank length 


or 0.5L amidships 
whichever is the greater 


a) Each deck plate 


b) Three transverse 
sections 


c) Each bottom plate 


2) — Measurements for general 
assessment and recording 
of corrosion pattern of the 
different structural members 
subject to Close-up Survey 
in accordance with 


Table 11.2 


4) - Selected wind and water 
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strakes outside the cargo 
tank length 


3) — Suspect areas 


4) - Selected wind and water 
strakes outside the cargo 
tank length 


5) — All wind and water strakes 
within the cargo tank length 


(vi) Preparation for Survey. 


This includes planning, condition for survey and access 
to structure. It covers the equipment to be used for ultra- 
sonic gauging and NDE equipment. 


(vii) Survey at sea or at anchorage. 


11.3 Planning and Preparation for Inspection 


The planning phase for any inspection should be a composite 
part of an overall planned maintenance strategy prepared by 
the owner for the ship for its expected service life. The master 
plan should encompass the different inspections necessary for 
monitoring the steel structure and protection systems to ensure 
continued fitness for purpose. 

For each ship the following should be established, in order 
to carry out an effective evaluation of the structural condition, 
prior to the commencement of any survey: 


(i) Structural drawings 
(ii) 
(iii) 
(iv) 
(v) 


Trading history 
Previous thickness measurements 
Condition and extent of protective coatings 


Classification status, including any outstanding condi- 
tions of class 


(vi) Previous repairs 


(vii) Typical load conditions and designation of tanks (cargo 
or ballast) 


With this information and the previous guidelines regarding 
critical areas within the hull structures considered to be sites 
of potential defects, it should be possible to target the appro- 
priate areas within the tank structure for survey and 
determining the scope of inspection. 


Table 11.2 Thickness Measurement - Oil Tankers 
Close-up Survey Requirements 


Special Survey | 
Age < 5 years 
A-— ONE WEB FRAME RING - 


in a wing ballast tank, if any, 


or a cargo wing tank used 
primarily for water ballast 


B —- ONE DECK TRANSVERSE 
— in acargo oil tank 


D - ONE TRANSVERSE 
BULKHEAD - in a ballast 
tank 


D —-ONE TRANSVERSE 
BULKHEAD - in a cargo oil 
wing tank 


D — ONE TRANSVERSE 
BULKHEAD - in a cargo oil 


centre tank 


Special Survey II 

5 <age < 10 years 

A-— ALL WEB FRAME RINGS - 
in a wing ballast tank, if any, 
or a cargo wing tank used 
primarily for water ballast 


B —- ONE DECK TRANSVERSE 
— in each of the remaining 
ballast tanks, if any 


B —- ONE DECK TRANSVERSE 
— in a cargo wing tank 


B - ONE DECK TRANSVERSE 
— in two cargo centre tanks 


C - BOTH TRANSVERSE 
BULKHEADS - in a wing 
ballast tank, if any, or a 
cargo wing tank used 
primarily for water ballast 


D —- ONE TRANSVERSE 
BULKHEAD —_in each 
remaining ballast tank 


D —- ONE TRANSVERSE 
BULKHEAD - in a cargo 
wing tank 


D — ONE TRANSVERSE 
BULKHEAD - in two cargo 
centre tanks 


A- Complete transverse web frame ring including adjacent 


structural members 


B - Deck transverse including adjacent deck structural members 


C - Transverse bulkhead complete — including girder system and 


adjacent members 


Oil Tanker 
Typical transverse section 


Special Survey Ill Special Survey IV 
10 <Age < 15 years Age > 15 years 


A-— ALL WEB FRAME RINGS - 
in all ballast tanks 


A-—ALL WEB FRAME RINGS - 
in a cargo wing tank 


A-— ONE WEB FRAME RING — 
in each remaining cargo 
wing tank 


C —ALL TRANSVERSE 
BULKHEADS - in all cargo 
and ballast tanks 


E - ONE DECK AND BOTTOM 
TRANSVERSE - in each 
cargo centre tank 


F — As considered necessary by 
Surveyor 


As Special Survey Ill 


Additional transverses included 
as deemed necessary by the 
Surveyor 


D - Transverse bulkhead lower part — including girder system and 


adjacent structural members 


E - Deck and bottom transverse including adjacent structural 


members* 


F — Additional complete transverse web frame ring 


Oil Tanker 
Typical transverse bulkhead 


- 
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Figure 11.1 
Thickness Measurement — Oil tankers (Close-up survey requirements) 
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Figure 11.2 


(26) Bottom transverse centre tank 
(7) Deck transverse wing tank 

(28) Side shell vertical web 

(29) Longitudinal bulkhead vertical web 
Go) Bottom transverse wing tank 
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(2) Transverse web face plate 

3) D.B. Floors 
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Thickness Measurement — Oil tankers (Typical transverse section indicating longitudinal and transverse members)) 
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11.4 Execution of Survey 


The survey must allow sufficient time to achieve the intended 
scope of inspection, otherwise the effectiveness of the survey 
and subsequent comparisons with past and future survey data 
will be diminished. 


The Master of the ship to be surveyed should be notified by 


the Owner of the following: 


Scope of inspection 

Tank washing requirements 
Safety precautions 

Additional support requirements 


Preliminary inspection schedule and inspection plan 


The method of carrying out the various types of inspection is 
to be identified, and Owners may make reference to the Tanker 
Structure Cooperative Forum “Guidance Manual for the 
Inspection and Condition Assessment of Tanker Structures”. 
These guidelines address the general planning requirements 
applicable to all surveys and describe the scope, additional 
planning requirements and data collection and reporting. 


Data should be analysed and compared with previous data 


to assess rates of corrosion, breakdown of coatings, wastage of 
anodes, etc., in order that recommendations for the short-term 
and long-term repair can be made at site. 


11.5 Analysis of Survey Data 


The analysis of all data prepared during the survey of the ship 
should be assessed to determine the following: 


(i) Corrosion trends, 

(ii) Problem areas in terms of corrosion, cracking and buck- 
ling, 

(iii) Short repair requirements, 

(iv) Long-term maintenance and repair requirements, 

(v) Future inspection and surveillance requirements. 


11.6 Repair and Maintenance 


Many different methods of repair and maintenance could be 
applied for the various types of coating breakdowns and/or 
structural failures that may be experienced in service. The 
following considerations would be given to the various scenar- 


ios experienced during the ship’s life: 

(i) Coating repair of existing (hard) coated area 
(ii) New coating and anodes for uncoated area 
(iii) Pitting repair 

(iv) Steel renewal 

(v) Steel reinforcement 

(vi) Steel design modification 


The optimum repair plan for the Owner would be to combine 
any of the above repair methods under the following 
constraints and considerations: 

(i) 
(ii) 
(iii) 
(iv) 
(v) 


Structure soundness within the finited remaining life 
Classification and regulatory approval 

Cost 

Risk analysis 


Ship out of service time 


This would ideally be followed by the Owner developing a 
short-term repair plan and a long-term maintenance 
programme to ensure the ship’s structural integrity within the 
remaining life of the ship. 

The short-term repair programme would only include the 
steel and coating repairs necessary to comply with the manda- 
tory repair requirements imposed by the Flag Administration 
and Classification Society. 

The long-term maintenance programme would be expected 
to include the following: 


(i) 
(ii) 


Continuous inspection programme 


Continuous repair programme 


12. CONCLUDING REMARKS 


This paper has aimed to present a cross-section of salient 
features which highlight the state-of-the art in existing tanker 
design and introduce modern trends of design, construction 
and inspection for double hull tankers. 

Proposals are often submitted to Lloyd’s Register to lower 
corrosion margins, increase allowable stress levels in ship struc- 
ture, relax building tolerances and generally reduce the 
inherent structural reserve. 

Serious problems have to be faced at the present time, most 
notable of which are a reduction in the number of shipyards 
available, the constant search for a reduction in steelweight and 
a great shortage of experienced engineers. 

Ageing tankers have to be contended with on the one hand, 
and their owners’ intention to keep them in service safely, and 
on the other hand the introduction of new double hull tankers 
using the knowledge gained from past experience. 

Future success can only be achieved by planning and devel- 
opment, and each stage must be carefully prepared and fully 
assessed by the state-of-the-art methods available. 

Awareness by all concerned of the situation will enable 
appropriate action to be taken to allay many of the potential 
concerns. These include: 


(i) | Appropriate calculations carried out to determine the 
long-term suitability of the structure; 


(ii) Locations of structure where a significant stress range 
occurs to be identified; 

(iii) Building tolerances and construction check points at 

higher risk locations to be improved; 


(iv) Greater attention of detail design; 


(v) Monitoring of structural performance with a view to 
assessing the adequacy of the survey system. 


Lloyd’s Register has addressed all these issues and published 
the necessary Rules, Regulations, Guidance Notes and Proce- 
dures. In addition, a complete suite of software has been 
developed for the shipbuilder to assist from design through to 
build, and, for the shipowner, effective monitoring of a ship’s 
structure throughout it’s life. 

However, it is considered imperative that the Shipowner, 
Shipbuilder and Classification Society should continue to work 
together to ensure that the new double hull tankers are 
designed from their inception for the intended operating life 
of the ship. Only by this close co-operation can the objectives 
be effectively and efficiently achieved, and thereby fulfil the 
intentions of IMO in the long-term protection of the environ- 
ment. 
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APPENDIX A 
MID-DECK TANKER 


MID-DECK TANKER 


MARPOL Annex I Regulation 13F states that double bottom 
tanks may be dispensed with, provided that the design of the 
tanker is such that the cargo and vapour pressure exerted on 
the bottom shell plating forming a single boundary between 
cargo and the sea does not exceed the external hydrostatic pres- 
sure. 

This regulation provides for the mid-deck tanker concept 
(see Figure A.1), where wing ballast tanks are provided 
throughout the cargo area and the cargo tanks are divided into 
upper and lower cargo tanks by a mid-deck, positioned in 
accordance with Regulation 13F, para. (4). The lower cargo tank 
is provided with an expansion trunk in way of the bulkhead. 

In a damage scenario, the oil in the lower cargo tanks is 
carried with an ullage space above the cargo surface (see 
Figure A.2). When the bottom shell is penetrated, water flows 
in and, because of the relative densities of oil and water, forms 
a layer between the oil cargo and bottom shell to a depth of oil 
cargo and the buoyancy force of the water. In order to provide 
for the rise in level of the cargo surface due to the ingress of 
water, and expansion trunk is provided at the bulkhead posi- 
tion (see Figure A.3). 


Wing 
Ballast 
tank 


Deck 


Upper cargo tank 


Lower cargo tank 


Figure A.1 
Midship Section arrangement of Mid-deck tanker 


Deck 


Wing 
Ballast 
tank 


Mid Deck 
Upper cargo tank 


Lower cargo tank 


Water fills lower part of cargo tank 


Figure A.2 
Bottom Shell pierced during grounding 
(transverse section) 


Longitudinal section 


Deck 


Oil fills 
expansion 
trunk 


Upper cargo 
tank 


Ullage space 


Water fills lower 


Lower cargo part of tank 


tank 


Oil expands up expansion trunk at bulkhead as water 
fills lower part of cargo tank 


Figure A.3 
Bottom Shell pierced during grounding 
_ (longitudinal section) 
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APPENDIX B 
CONSTRUCTION TOLERANCES 


TYPES OF JOINT 


CONSTRUCTION TOLERANCE 


Square butt 
| 
pee eee 


G=t/2 


t<6mm maximum 


Single level butt 


| 


G<3mm 
R=2-3mm 
6=50—70° 


6<t<1l6mm 


Double bevel butt 


G 
R=2-3mm 
@=50—70° 


19<t<38mm 


JO 


TYPES OF JOINT 


CONSTRUCTION TOLERANCE 


Single vee butt, 
one side only welding 


G<3mm 
6 = 45° 
t< 16mm 
Single vee butt, one side welding 
with temporary backing strip 
‘ 8 
ee 
: i G =2-6mm 
@= 45° 
t< 38mm 
Single vee butt, normal welding 
and back gouging 
8 
G<3mm 
R=2-3mm 
6=50-70° 


oe 
AA 
Seay 


6<t<l6mm 


TYPES OF JOINT 


CONSTRUCTION TOLERANCE 


Double vee butt, uniform bevels 


t) 
t ey hee. 
| = R 4 G<3mm 
| R=2-3mm 
6=50-70° 
| a | t< 38mm 
G 
Double vee butt, non-uniform bevels 
6 
t an G<3mm 
| R R<2mm 
+ 6mm <h<t/3 


62 45° 


16<t<38mm 


Tee fillet 


G<3mm 


TYPES OF JOINT 


Single bevel tee 


CONSTRUCTION TOLERANCE 


G<3mm 
R=2-3mm 
6=50-70° 


t< 38mm 


Double bevel tee 


Double ‘J’ tee 


G<3mm 
@ >50° 
R=2-3mm 


19<t<38mm 


TYPES OF JOINT CONSTRUCTION TOLERANCE 
Alignment of butt joints 
| 
Strength a = 0.15t (max 3) 
Others a = 0.2t (max 3) 
a 
a! 
Alignment of fillet welds 
ast,/3 
i t)/SaSt,/2 
| increase fillet 
a a2t,/2, adjust 
where t; < t, and t, 
ast;/3 
tet 
b 
Alignment of fillet welds 
tp —+ -_— 
a 
i Not on WT/OT connection and 
1 - t tensile loading 
G<3mm 
| a = 5mm (clear of fillet toe) 
ty Stst, 
b 
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TYPES OF JOINT = CONSTRUCTION TOLERANCE 


Excessive gap treatment 


X = 300mm 


xX 


Undercut fillet 


Strength D = 0.5mm 
Others D = 0.8mm 


hg 
"2 
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TYPES OF JOINT 


CONSTRUCTION TOLERANCE 


Butt weld taper 


|" 


t; —t > 3mm 
Transition within width of weld 
t -t, > 3mm 


Taper 3:1 


Permissible values of deformation 


Item 


Strength deck, shell envelope, tank top 
webs of girders, stringers and 
transverses, all within 0.6L amidships 


All other plating including internals 
and effective superstructure for 
full ship length 


Other superstructure and deckhouses 


Limit 


Wg = S/133 or t whichever is 
the lesser 


@ = S/80 or t whichever is 
the lesser 


Mg = s/80 


S 
Standard 
Wp = s/200 
Mp) =s/120 
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SYNOPSIS 


In 1989 Lloyd’s Register re-focused its research activities on 
combustion in diesel engines in view of the debate on the 
marine industry’s contribution to air pollution that was about 
to commence within the International Maritime Organization 
forum. As a consequence, the LR Marine Exhaust Emissions 
Research Programme was initiated and was directed toward 
quantification of the contribution to air pollution from large 
marine diesel engines. 

In Phase I of the programme the exhaust emissions from 
some fifty or so engines were measured under normal steady 
state operating conditions with a view to deriving a set of emis- 
sion factors. Phase II of the work extended the research to 
transient operation. This paper primarily addresses the results 
and some conclusions of the measurements in terms of the 
gaseous pollutants of NO,, SO,, CO, CO, and hydrocarbons 
from marine two and four stroke engines ranging from 350 kW 
through to 22,000 kW. Furthermore, the results of some prelim- 
inary assessment of the emissions of heavy metals and organic 
micropollutants are given. 

In a parallel research programme, within Lloyd's Register, 
considerable development has been undertaken on the predic- 
tion of exhaust gas species under steady state and transient 
conditions by means of theoretical models. A preliminary 
assessment of the results so far achieved is reported. 


1. INTRODUCTION 


The Lloyd’s Register (LR) Marine Exhaust Emissions Research 
Programme (MEEP) was initiated in 1989. At that time it was 
apparent that little information on, or basic data from which to 
calculate, the significance of exhaust emissions from shipping 
under either steady state or transient conditions was available. 
Moreover, the data which was available was often presented in 
forms which did not assist in the overall quantification of 
exhaust emissions; in many cases being largely derived from 
engine test bed trials. Since test bed engines would generally 
tend to be in peak mechanical condition and operated to the 
highest standards, frequently on test fuels, exhaust emission 
data derived under such conditions would not necessarily 
reflect the true position as it related to ships in service. The LR 
research programme was, therefore, principally concerned 
with the quantification of exhaust emissions from engines in 
service which had neither been specially prepared prior to 
monitoring nor the mode of operation altered from that 
normally adopted. 

From the outset it was apparent that an extensive research 
programme would be required in order to satisfactorily assess 
the contribution of marine exhaust emissions to atmospheric 
pollution. The Programme was therefore structured to operate 
ina series of Phases; each Phase building on from the preceding 
work and developing the investigation further in order to 
present an all encompassing overview of the subject. 

In parallel with the Marine Exhaust Emissions Programme, 
the MERLIN diesel engine simulation capability [1] was being 
further developed in the context of an exhaust emissions 
predictive procedure. The objective of this extension to 
MERLIN was to predict exhaust emissions using a multi-zone 
combustion emissions model, under both steady-speed and 
transient engine operating conditions. 

This paper primarily addresses the results and some conclu- 
sions of the measurements in terms of the gaseous pollutants 
of NO,, SO, CO, CO, and hydrocarbons from marine two and 
four stroke engines ranging from 350 kW through to 22,000 kW. 
Furthermore, the results of some preliminary assessment of the 
emissions of heavy metals and organic micropollutants are 
given. Also the results on the prediction of exhaust emissions 
under steady state and transient conditions are given. 


2. MARINE EXHAUST EMISSIONS 
PROGRAMME 


Phase I 


Phase I of the Programme was concerned with determining 
typical rates of discharge of the principal gaseous components 
of the exhaust emissions from marine diesel engines operating 
under steady state conditions. Fifty engines installed on forty 
ships were monitored at a range of loadings from idling to full 
power. Vessel types studied included ferries, bulk carriers, 
tankers, container ships, dredgers and tugs; while engine types 
included both medium and slow speed engines with developed 
powers across the available range and operating on both distil- 
late and residual blend oil fuels. Emissions of nitric oxide (NO), 
sulphur dioxide (SO,), carbon monoxide (CO), carbon dioxide 
(CO), oxygen (O,) and hydrocarbons (HC) were monitored 
and engine performance parameters were recorded simultane- 
ously using the vessel’s own instrumentation. 

Sample acquisition, transfer and analysis procedures closely 
followed the recommendations of recognised standard proce- 
dures [2,3] and the equipment employed is shown 
schematically in Figure 1. Exhaust gases were continuously 
sampled through a stainless steel probe with the sample intake 
section located at a minimum distance of 1 m or three exhaust 
diameters inwards from the open end of the exhaust stack. The 
section of the probe where exhaust sample intake occurred lay 
perpendicular to the path of the exhaust flow and spanned 
approximately 80% of the exhaust diameter in the manner 
shown in Figure 2. The use of variable length extension pieces 
ensured that this configuration was closely adhered to and 
sample intake took place through a series of holes located on 
3 axes at 120° to one another. The temperature of the exhaust 
gases at this point was monitored by means of a thermocouple 
placed in the exhaust flow. 

At the upper end of the sampling probe, the exhaust was 
drawn through a sintered ceramic filter. Both the filter and, 
when necessary, the sampling probe were electrically heated to 
191 + 11°C to prevent sample losses. The gaseous and volatile 
exhaust components passing through the filter were subse- 
quently drawn downa heated line, also maintained at the above 
temperature, to the measurement position where the gas anal- 
ysers and ancillary instrumentation were located. The heated 
sample transfer line was constructed around high grade PTFE 
sample tubing. All other parts of the sampling system which 
came into contact with the exhaust gas sample were fabricated 
from either high grade PTFE or 316 stainless steel. 


The heated line fed the sample gas directly to the hydrocar- 
bon analyser. Immediately prior to this analyser, the sample 
path was divided in order that a proportion of the sample gas 
could be directed to the gas conditioning unit; Figure 1. Within 
this unit, the sample gas was ‘dried’ by passing it through a 
condensate trap held at less than 4°C and then through a fine 
glass fibre filter before being distributed to the NO, SO,, CO, 
CO,, and O, analysers. Calibration gases were admitted to the 
analysers through the gas conditioning unit which was fitted 
with selector valves and flow controllers. 

The choice of analytical instrumentation was largely 
governed by the constraints of portability, accuracy and stabil- 
ity under the often demanding conditions on board ship where, 
amongst other problems, instability of electrical supply and 
vibration from the ship’s machinery were likely to be encoun- 
tered. Non-dispersive infra red analysers were selected to 
monitor NO, SO,,CO and CO,;a paramagnetic analytical tech- 
nique measured O, and a heated flame ionisation detection 
technique was employed for the measurement of hydrocar- 
bons. NO, was measured in this Phase of the research 
programme as NO since a previous study [4] had indicated that 
under steady state operating conditions NO was likely to form 
approximately 90-95% of the total NO, at the point of exhaust 
discharge. 

From the emission data acquired, exhaust emission factors 
were derived for both medium and slow speed diesel engines 
in terms of both kg pollutant per tonne of fuel and g pollutant 
per kWh Table 1 [5,6]. 


Table 1 - Emission Factors for Medium and Slow Speed 
Diesel Engines 


kg/tonne fuel 
Engine Type 


kg/tonne fuel 
Medium Speed Slow Speed 


g/kWh 
Medium Speed 


g/kWh 
Slow Speed 
18.7 


21.0°S 21.0°S 


S = Sulphur content of oil fuel (% by weight) 


ems Heated sample line 


——= Gas line 


Condensate drain NDIR ; 


FID 3 Gas 
hydrocarbon conditioning 


analyser A unit Paramagnetic 


Analyser 


Ambient 


im or 3D 


Minimum distance 


a 


r 


S Figure 2 Position of Sample Probe at Outlet of Exhaust System in Phase 1 
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Phase II 


Phase II of the research programme subsequently provided 
baseline data on the magnitude and character of the emissions 
generated under transient operating conditions and also 
assessed the influence of marine exhaust emissions on air qual- 
ity in the vicinity of heavy shipping activity. The two parallel 
lines of research in this Phase embraced a programme of ship- 
board emission measurement under transient operating 
conditions and a marine emissions quantification and environ- 
mental impact exercise centred on the port of Vlissingen in the 
Netherlands [7,8,9]. Although transient operating conditions 
occur only over a very limited proportion of the ship’s operat- 
ing cycle, they are of particular significance due to the 
non-optimal combustion conditions and their emission 
discharge close to centres of population. 

Emission trials were conducted on eight vessels incorporat- 
ing a range of ships, machinery and operational types; Table 2. 
Asin the case of Phase I, vessels were monitored as found under 


Table 2 - Transient Emission Trials: Vessels Monitored 


Total N° 


typical in-service conditions. Trials were principally under- 
taken during arrival, start up and departure manoeuvres 
although other transient operations were also assessed where 
they were likely to be of significance. 

The exhaust gas species NO,, SO,, CO, CO,, HC, and O, 
were monitored together with engine and ship performance 
parameters ina similar way to that of Phase I of the Programme 
except that the exhaust gases were sampled from the exhaust 
duct system rather than in the upper part of the funnel. Further- 
more, through the use of a convertor unit NO, content rather 
than NO was determined. In order to account for the variable 
time phasing of the emission signals, exhaust emission concen- 
trations and engine performance parameters were 
simultaneously and continuously recorded over each trial 
period by a computer based data acquisition system. Figure 3 
shows an example of the transient emission responses for a 
container ship (S5) fitted with a fixed pitch propeller during 


GRT Length Propulsion — Engine Monitored — Propulsion 


(tonne) Overall (m) — Engines 


31,598 179.03 


449 
Rhine Barge 2,000 85.94 


Dredger 3,366 

Container 67,327 297.03 

Ferry 19,763 134.02 

Ferry 8,166 113.02 
$8 Tanker 68,286 280.07 


MS - Medium Speed SS - Slow Speed 
CPP - Controllable Pitch Propeller © FPP - Fixed Pitch Propeller 
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Figure 3 Variable Speed Engine Emission Profile - Container Ship 


port arrival manoeuvres. In contrast Figure 4 shows a complete 
voyage cycle for a Ro/Ro esturial ferry (S7) fitted with constant 
speed diesel-electric propulsion. 

Preliminary assessment of emissions of heavy metals and 
organic micropollutants was carried out on three of the vessels 
upon which transient emission trials were conducted. In this 
work the micropollutant species assessed were those species 
present in trace quantities and embraced the polyaromatic hydro- 
carbons (PAHs), nitro-polyaromatic hydrocarbons (n-PAHs), 
polychlorinated biphenyls (PCBs), polychlorinated dibenzodiox- 
ins (PCDDs) and polychlorinated dibenzofurans (PCDFs). 

From the data derived, order of magnitude estimates of the 
annual emissions of micropollutants from marine diesel 
engines were made. These are presented in Table 3 together 
with corresponding estimates for the Netherlands (all indus- 
tries) and total anthropogenic emissions worldwide. Further 
work is scheduled to confirm these initial findings. 
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i 0.1-1.3 44.5 
66-466 1,200 
1-18 
PCDD/F 0.00001-0.001 
Metals and metalloids: 
arsenic 91-130 , 18,820 
cadmium <2.6-<3.9 : 7,570 
chromium 37.7-50.7 30,480 
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mercury <0.13-0.65 iL 3,560 
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vanadium 9,490-13,039 
zinc 78-97.5 


* based on estimated annual worldwide marine oil fuel consumption 
of 130 million tonnes. 


* total atmospheric emissions, 1988[11] 


** Median of highest and lowest estimated annual anthropogenic 
emissions [12,13] 
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Figure 4 Constant Speed Engine Emission Profile — Ferry 


Phase III 


Phase III of the research programme is currently being 
executed. This Phase considers both the particulate compo- 
nents of the exhaust emissions, which was deliberately omitted 
from Phase I for reasons of speed of execution of the 
programme, and the overall quantification of the marine contri- 
bution to air pollution in the European Coastal Waters and also 
the North Atlantic. As in the case of Phase II, two parallel lines 
of research are being pursued and these embrace a shipboard 
particulate emission measurement programme and the devel- 
opment and application of regional emission quantification 
methodology covering the North Sea and North Atlantic areas. 

The methodology adopted for the shipboard determination 
of particulate emissions is based on the dilution tunnel/gravi- 
metric analysis technique recommended by CIMAC [10]; 
however, modifications have been made to account for condi- 
tions on board ship. 

The matrix of vessels to be investigated encompasses the 
ship types assessed in Phases I and Il of the research programme 
and includes: 


a) Two vessels powered by slow speed crosshead engines 
operating on residual blend fuel oils; 


b) Two vessels powered by medium speed trunk piston 
engines operating on residual blend fuel oils; 


c) Two vessels powered by medium speed trunk piston 
engines operating on marine gas oils. 


Replicate trials will be undertaken on one of the vessels in order 
to establish reproducibility and to examine sensitivity to factors 
such as fuel quality. A total of eight ship trials will be conducted 
in this latter Phase of the research programme. 

The sampling of particulate exhaust emissions will take 
place under a range of main engine steady state conditions, 
from idling to full power. Particulate material collected during 
the trial period will be subjected to two levels of analysis. The 
primary level will be a simple mass determination in order to 
quantify the fuel and power specific particulate emission rates 
at a number of operating conditions. The second level of eval- 
uation will be more detailed and will determine the basic 
composition of the particulates including total carbon, hydro- 
carbon, volatiles, ash, sulphate and nitrate content. The source 
of the particulates, whether fuel or lubricant derived, is 
intended to be established. 

In order to place the particulate emission findings within 
the context of the data generated in Phases I and II of the 
research programme, gaseous emissions of NO,,SO,,CO,CO,, 
HC and O, will be simultaneously monitored and recorded on 
a real time basis together with relevant engine performance 
parameters. 

During all Phases of this research it was recognised that the 
fuel quality was important in interpreting the findings 
obtained. Consequently, samples of the oil fuels in use at the 
time of each trial were analysed by Lloyd's Register’s fuel eval- 
uation service (FOBAS) in accordance with standard industry 
procedures. ; 


3. DISCUSSION OF RESULTS FROM 
PHASES I AND II 


In order to provide a common basis on which to evaluate the 
emission concentration responses recorded, mass specific emis- 
sion rates for NO., HC and CO were determined [10]. These 
mass specific emissions, expressed as kg of pollutant per tonne 
of oil fuel consumed, were calculated for each data point 
recorded and were termed Instantaneous Emission Factors 
(IEF). 

From the emission data acquired [8], it was apparent that 
NO,, CO, HC and emission factors were principally related to 
engine load and speed. Where other factors affected emission 
concentrations their effect was marginal. NO,, CO and HC 
emission species generally displayed fast reactions to changes 
in engine load or speed and stabilised readily. On engine start- 
ing and with those engines where changes in engine load could 
alter engine speed, rapid increases in load particularly from 
relatively low loads could result in extreme short duration peak 
values being experienced in the HC and CO emission concen- 
trations, Figure 3. Where engine load was either increased 
gradually, decreased or when engines were constant speed, 
peak values were not encountered, Figure 4. The NO, emission 
concentrations were not directly affected by the rate of change 
of load under any of the situations monitored, although in some 
instances where extreme CO peaks were encountered NO, 
formation appeared to be suppressed by the apparently poor 
combustion conditions, Figure 3. For both constant and vari- 
able speed engines, the response of the emission concentrations 
could be distorted, however, on rapid reduction from high to 
low load levels as the reduced gaseous flow through the engine 
failed to adequately ‘update’ the gases in the exhaust duct. 

For the three constant speed engines monitored a common 
response was evident. Increased load resulted in decreased HC 
and CO and increased NO, Instantaneous Emission Factor 
(IEF) values, although substantial differences were experienced 
in the magnitude of these responses. With the two vessels fitted 


with fixed pitch propellers only the NO, IEF values showed a 
consistent inverse relationship to engine load. 

The third category consisted of the three vessels where both 
engine speed and propeller pitch were altered by load manage- 
ment systems. The extent to which the exhaust emission 
responses differed from those determined for the constant 
speed engines depended on the degree to which the engine 
speed was altered over the load range. Where engine speed was 
significantly reduced along with load, high NO, IEF values 
were encountered at both ends of the load range. 

Comparison of the total mass of emissions generated on a 
time basis during transient operations with those produced 
whilst ‘on passage’ indicated that the quantities of CO emitted 
during manoeuvring were significantly greater, and those of 
NOx significantly lower, as compared to ‘on passage’. In 
contrast, HC emissions exhibited no consistent trends and were 
not subject to significant departures from the steady state emis- 
sion rates. Although reductions in the quantities of SO, and 
CO, emitted were experienced whilst manoeuvring as 
compared to ‘on passage’, these were solely attributable to the 
decreased oil fuel consumption rates under manoeuvring 
conditions. In addition, for vessels operating over fixed short 
routes CO emissions during manoeuvring operations were 
found to be substantial in comparison to emissions generated 
port to port. In contrast, the quantities of NO. and HC were 
not unduly affected. 

Assessment of the mass of emissions generated during tran- 
sient operations relative to those which would have been 
predicted using steady state emission factors, Table 1, and oil 
fuel consumption over these operations provided estimates 
which were generally within a factor of two of the masses actu- 
ally emitted. It was thus concluded that where transient 
exhaust emissions from a particular vessel are to be quantified, 
onboard monitoring should generally be employed. However, 
where quantification of emissions from shipping in an area or 
on a particular route is required, application of steady state 
emission factors over a number of vessels should provide a 
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Figure 5 English Channel Survey 1991 


reasonable approximation of overall emission trends. Using the 
results of this workit has been shown that for the port of Vlissin- 
gen in the Netherlands [9] the influence of maritime traffic is 
small with respect to local air quality in comparison to indus- 
trial sources. Similarly, studies of ship emissions in the English 
Channel [14] have also indicated that the marine contribution 
is small compared to United Kingdom and European Commu- 
nity anthropogenic sources. Figure 5 shows a typical result of 
NO, emission distribution within the English Channel. 

The estimated annual emissions in the English Channel 
given in Table 4 can be compared with equivalent emissions 
from other sources. In this context they can be considered in 
relation to the overall UK and EC emissions of the various 
pollutants. In the case of the UK based emissions, it is reason- 
able to consider them in this way due to the prevailing weather 
conditions in transferring the emissions to the continent of 
Europe. For the second comparison of the total EC emissions, 
this is considered of interest as the sea area is wholly contained 
within the EC. 


Table 4 - Maximum, Minimum and Annual Emissions 
for the Region of the English Channel considered 


Emission density (kg/km?/day) Annual emission 
Minimum Maximum (t/year) 


2 <10 90.2x103 
o, = aj a 9x108 
9.8 12.9x108 
3.0 4.7x108 


Emission 
species 


<0.5 


10 


Reference [15] suggest that the annual emissions from 
anthropogenic sources in 1990 for the UK are 2.7 x 106 tonnes 
and 3.8 x 106 tonnes for NO, and SO, respectively. In the case 
of CO, industrial emissions amount to 560.3 x 106 tonnes which 
is about 65% of the anthropogenic emissions [16] . Furthermore, 
by combining the emissions quoted in Reference [15] for each 
of the EC countries a comparison (see Table 5), showing the 
relationship between the ship emissions in the study area and 
the emissions from anthropogenic sources in the case of NO, 
and SO,, and industrial sources for CO, can be produced. In 
the case of CO and HC emissions, using data derived from the 
European Monitoring and Evaluation Programme (EMEP) and 
the Organisation for Economy Cooperation and Development 
(OECD) [17] for the year 1989, the values quoted in Table 4 are 
both of the order of 0.2% of the equivalent anthropogenic emis- 
sions for the UK. It must, however, be recognised that in some 
port areas traffic and geographical factors combine to increase 
the significance of marine based emissions. 


Table 5 - Ship Emissions in Study Area Expressed as a 
Percentage of those from all Anthropogenic and 
Industrial Sources 
Percentage of anthropogenic or industrial emissions 
UK emissions EC emissions 


3.3% 0.7% 


Emission 
species 


4. EMISSIONS PREDICTION PROGRAMME 


The application of advanced computer techniques, within LR, 
to areas of engine performance and combustion technology has 
encompassed a number of technical issues such as fault diag- 
nosis, condition and performance monitoring, engine 
operation with variable quality fuels, engine performance 
prediction and more recently, exhaust emissions analysis and 
control. The development of a diesel exhaust emissions predic- 
tive capability (DEEPC) was initiated in 1990 with the objective 
of predicting exhaust emissions, from fundamental principles 
of diesel combustion, under both steady state and transient 
engine operating conditions. 

DEEPC is a quasi-dimensional diesel engine exhaust emis- 
sions prediction model [18] which is based on a 
phenomenological multi-zone modelling concept. In DEEPC, 
injection is assumed to be characterised in the shape of inter- 
mittent pockets of fuel being emitted from the injector nozzle 
hole and thereby making segments of fuel spray as injection 
proceeds, Figure 6. Each spray segment is in turn subdivided 
into a number of combustion zones, thus modelling the fuel 
spray combustion in a quasi two dimensional manner. 

Development of each combustion zone involves zone 
formation, atomisation of fuel, air entrainment, droplet evap- 
oration, ignition, heat release and emissions formation. Within 
DEEPC spray atomisation takes place upon injection and after 
the jet break-up period. This is followed by fuel droplet evap- 
oration and air entrainment, Figure 6. Droplet evaporation has 
been accounted for by considering both heat and mass transfer 
for droplets while travelling in a gaseous environment. The air 
entrainment rates into individual combustion zone is calcu- 


Air zone 


Spray angle 


lated based on general jet theory and spray penetration. The 
influences of air swirl and spray-wall impingement have been 
included in the model. 

The ignition delay is accounted for and estimated ona zonal 
basis. The fuel-oxygen reaction rate is embodied by a second 
order kinetic reaction and allowance is made for combustion 
of rich mixtures which normally is the case within the fuel 
spray. Heat transfer from combustion zones to cylinder wall is 
modelled taking into account both convective and radiative 
heat transfers. 

The emissions model uses chemical equilibrium, as well as 
the kinetics of fuel, NO, CO, and soot reactions in order to calcu- 
late the pollutant concentration within each zone and the whole 
of the cylinder. The NO formation is modelled based on the well 
known extended Zeldowich mechanism taking into account the 
kinetics of NO formation. The fuel-bound nitrogen is assumed 
to fully convert to NO during the course of combustion. The dry 
soot (solid particulates) formation and oxidation are based on 
reaction rate equations, relating them to local in-cylinder 
temperature, fuel vapour, soot and oxygen concentrations. The 
soluble organic fraction content of particulates is estimated 
using known correlations between HC, total particulates and 
dry soot. CO formation and oxidation are assumed to be kinet- 
ically controlled and have been modelled accordingly. 

The DEEPC model relies on either experimentally or theo- 
retically predicted fuel injection characteristics which include 
injection pressure, nozzle coefficient of discharge, injection 
timing and injection duration. The model has so far been used 
to predict exhaust emissions for a number of engines as well as 
to investigate the effects of various parameters on exhaust emis- 
sions [18,19,20]. 
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Figure 6 Multi-Zone Concept of Combustion — Emissions Model 


~O-—©- Predicted —O—-O— Measured Figure 7 shows an example of the theoretical model predic- 
tions as compared to the measured data for a slow-speed 
two-stroke marine type research diesel engine. The overall 


= agreement between predicted and measured data is reasonable 
5 taking into account the complexity of the processes which are 
a . . 

xy involved. Table 6 shows the results of a parametric study 
* conducted for a four-stroke medium-speed marine type diesel 


engine showing the effects of changes in fuel injection pressure, 
percent exhaust gas recirculation, air swirl, boost temperature 
and injection timing on exhaust emissions. 

DEEPC has been fully integrated into MERLIN [1] and can 
run as either a stand-alone combustion emissions prediction 
model or an integral part of engine cycle simulation. The inte- 
gration of DEEPC to MERLIN is schematically shown in 
Figure 8. As Figure 8 indicates, the DEEPC multi-zone combus- 
tion option can be fully by-passed if needed by the user. 
Transfer of data between the engine model and the combustion- 
emissions model is limited only to cylinder conditions and total 
calculated exhaust emissions at the point of exhaust valve 
opening (EVO). All other calculations are local with respect to 
the two models. Figure 8 also shows that the fuel injection char- 
acteristic is generated by the fuel injection model for each 
cylinder at the point of injection once per cycle. 


Transient Emissions Prediction 
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Figure 9 shows the schematic of the developed engine transient 
model. The extension of MERLIN-DEEPC to predict engine 
performance under transient conditions involved developing 
models for engine governor, fuel pump, turbocharger dynam- 
ics and engine dynamics. 
2 4 6 8 10 12 14 The governor model relates the output of the governor (fuel 
BMEP rack position) to its inputs which include governor setting and 
(bar) ‘ . 
engine speed, Figure 9. The fuel pump model relates the fuel 
injection quantity and injection characteristics including injec- 
tion timing, injection duration and so on to the fuel rack position 
and engine speed. The output from the fuel pump model is input 
to the cylinder model as shown in Figure 9. Both governor and 
fuel pump models were based on measured characteristic of 
these components under normal engine steady-speed operation. 
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Figure 7 
Comparison of Measured and Predicted Exhaust 
Emissions for a Slow-Speed Two-Stroke Engine at a 
Constant Speed of 155 rpm 
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Figure 8 Integration of Combustion-Emissions Model to Engine Cycle Simulation 
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Table 6 - Summary of Predicted Outputs with Various Operating Input Parameters 


INPUT PARAMETERS COMBUSTION EMISSIONS 
Test Mean fuel | Swirl ratio | Boost Percent Dynamic Trapped Max. rate | Max. Max. bulk | NO HC CO Soot SOF Particulate 
Number line at injection | temp. EGR injection air/fuel of boat cylinder cylinder 
pressure timing ratio release pressure temp. 
[bar] ley IK] ltedh [CAATDC] | [-] [/CA] [bar] [kK] [epm.dry] | [ppm,dry] | [ppm.dry] | Img/Nm§]_| [mg/Nm3]_ | [mg/Nm3} 
*(Baseline) 1 489 0 320.00 0 -5 27.08 1638.60 93.94 1946.00 2448.40 116.73 14.17 295.00 40.00 335.00 
Eat ai | 0 320.00 ) -5 Skt 1808.50 101.40 2088.00 2937.50 waao | i930 250.00 40.00 290.00 
3 734 0 320.00 — 2186.50 110.30 2058.00 3937.00 73,29 0.53 36.00 23.00 59.00 
| 
4 489 3 320.00 0 1720.60 98.20 2040.60 2839.90 65.43 0.50 18.70 20.00 38.70 
3) 489 6 320.00 0 1733.90 101.50 2073.80 2962.40 92.50 0.35 23.90 
6 489 0 300.00 6) 1604.00 93.80 1915.90 1742.00 133.51 39.17 280.30 
7 489 6) 340.00 0) 1531.90 91.73 2141.50 2839.40 137.87 36.52 345.40 
8 489 0 360.00 (6) 1548.50 91.25 2268.80 3205.10 173.49 61.81 391.00 53.00 
9 489 (e) 322.95 5 1558.50 92.85 2001.00 1625.90 237.38 299.50 77.00 376.50 
10 489 0 326.71 10 1441.60 89.73 2051.80 259.117 697.50 155.00 852.50 
11 489 0 330.30 ale) 1379.70 88.00 1987.50 676.10 135.00 773.30 302.00 1075.30 
12 489 6) 320.00 0 1500.00 82.40 2010.50 1659.90 181.20 48.60 377.40 60.00 437.40 
13 489 (6) 320.00 ) 1595.90 103.10 2054.50 3024.00 44.82 293.00 39.00 332.00 
14 489 0) 320.00 0 1665.30 114.30 2108.20 3769.00 135.65 1.01 142.90 43.00 142.90 


*(1) For all tests: Engine Speed = 752 rev/min Fuelling = 0.735 g/cycle/cylinder Boost pressure = 219.0 kPa 


(2) The main input parameter which is different from the baseline (test number 1 ) is underlined 
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Figure 9 —- Schematic of Engine Transient Model 
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Figure 10 Comparison of Measured and Predicted Engine Response and Exhaust Emissions 


Figure 9 shows that under the transient mode of operation, 
the primary inputs to the model include engine governor 
setting, engine brake load and ambient conditions. The gover- 
nor setting and engine brake load are normally the measured 
data and supplied as a function of time in the form of look-up 
Tables. The outputs of the model include engine and 
turbocharger speeds, engine thermo-fluid information 
throughout the engine flow path and exhaust emissions. 

The predictive capability of the model under transient oper- 
ating conditions was tested using testbed data gathered under 
fast engine accelerations. The engine used was a vehicle type 
high speed one, mounted on a fully computer controlled tran- 
sient test-bed. This allowed both engine control and data 
logging to be carried out under fast transients. Figure 10 shows 
typical predicted transient performance and emissions against 
the measured data. The relatively high level of the transient 
exhaust emissions for this engine is attributed to sudden 
increase in engine fuelling and the absence of any fuelling 
control as a function of turbocharger response. Both engine and 
turbocharger responses together with the responses of exhaust 
emissions are predicted reasonably good. 

The integrated system has been used to predict engine 
performance and exhaust emissions under both steady state 
and transient conditions [19,20]. It has also been applied to the 
complex area of engine optimisation for reduced steady and 
transient exhaust emissions [21]. As part of this study, the 
effects of exhaust gas recirculation (EGR), fuel injection equip- 
ment, control of engine fuelling under transient operating 
conditions, valve timing and so on were investigated. Figure 11 
shows an example of the predicted effect of maximum fuelling 
on exhaust emissions during engine acceleration under 3 bar 
brake mean effective pressure (BMEP). Analysis of measured 
data from the same engine [22] showed the validity of such 
predictions. 

Research results from both MEEP and DEEPC programmes 
confirmed that engine exhaust emissions under manoeuvring 
conditions are generally characterised by higher emissions of 
CO, HC and particulates but lower NO, levels relative to 
normal high-load steady-speed operation. 
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Figure 11 
Predicted Effect of Maximum Fuelling on Exhaust 
Emissions during Acceleration for a Test-Bed Engine 


5. CONCLUDING REMARKS 


The work outlined in this paper forms part of a continuing 
research programme, commenced in 1979, by LR into diesel 
engine combustion and exhaust emissions. So far gaseous emis- 
sion factors under steady state and transient operating 
conditions for large engines have been established together 
with the development of predictive capabilities. 

The particulate emission measurement and marine emis- 
sion quantification exercises, forming Phase III of the Marine 
Exhaust Emissions Programme were initiated in 1993. It is 
anticipated that this Phase of the work will be completed by 
autumn 1994. A report detailing the findings of these studies 
will be publicly available at that time. 
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DISCUSSION 


From Mr P Koller 


I should like to thank the authors for a very interesting paper. 
Itis a useful summary of the LR involvement to date with emis- 
sions from diesel engines. 

Although the marine contribution to airborne pollutants is 
shown to be rather small, there is nevertheless still likely to be 
political pressure for a reduction in emission levels. We may not 
agree with the resulting regulations but that is another matter. 

IMO, through MEPC, are at present developing emission 
regulations. It is understood, for example, that new crosshead 
engines will be limited to 17 g/kwh of NO, when operating 
on marine diesel oil during a specified test cycle. 

Table 1 of the Paper indicates an averaged 18.7 g/kwh of 
NO, measured when these engine types are operating under 
steady state conditions on heavy fuel oil. What is the correla- 
tion between these two figures and do they not suggest that 
crosshead engine designers may not need to make many 
compromises in order to meet the initial regulations? In fact, 
is the overall IMO objective for a 30% reduction in total NO, 
emissions from ships by the year 2000 achievable? 

It is noted that for measurement of particulate levels in phase 
III samples will be drawn from the engine exhaust manifold. 
When burning heavy fuel oil dosed with cylinder lubricants a 
significant amount of soot collects on the tube elements of 
exhaust gas economisers. Not all this soot, which can be consid- 
ered perhapsa little differently to particulates, will be discharged 
into the atmosphere. When “soot blown”, a portion will land 
quickly on adjacent surfaces and with water washing a portion 
will never be discharged from the uptakes. Would it not be more 
representative, then, to sample at the top of the funnel? 

So far as am aware, the first regulations to come into force 
will be those covering vessels on inland waterways and in 
coastal areas. 

The BSO (Bodensee Schiffahrtsverordnung) already sets 
limits on Lake Constance viz: 

for NO, from 1993, maximum 15 g/kwh. 

and from 1996, maximum 10 g/kwh. 


Those limits are then applied to high speed engines. Do the 
authors have any figures for high speed engines as they do not 
seem to have been included in LR’s published measurement data? 

It certainly seems that high speed engine designers are of 
necessity ahead of their colleagues involved with medium and 
slow speed engines and are already compromising efficient 
arrangements in order to limit emissions. 


To Mr P Koller 


With regard to the correlation of NO, limits proposed by IMO 
and the level of NO, measured by LR, there is no direct rela- 
tionship between the LR values and the IMO proposed limit. 
The values of 18.7 g/kWh given in the paper for the slow speed 
engines is an averaged value for the levels detected within the 


50% to 85% MCR power band from a relatively small sample 
of ships engines. The proposed IMO limit is, however, to apply 
toa weighted average value obtained froma series of measure- 
ments made at defined load points. 

For main engines, the NO, would be measured at 100%, 
70%, 50% and 25% loading and then weighted using factors of 
0.2,0.5,0.15 and 0.15 down the power range. Taking the highest 
and lowest emitters from the engines assessed by LR and using 
the IMO evaluation procedures for the worst and best cases, 
values between 24 g/kWh and 13.1 g/kWh are obtained. 

From this it may be seen that in certain installations the 
engine manufacturer will be presented with the prospect of 
considerable work being required on an engine before achiev- 
ing the IMO limit with any degree of confidence, whilst in other 
situations little or no development will be necessary. 

The proposal for a 30% reduction in total NO, emissions 
from ships by the year 2000 has not proved feasible on account 
of the costs and difficulties in achieving the required NO, 
reductions in existing engines. Regulations limiting NO, from 
new engines have generally been agreed; however, their 
impact on overall NO, emission levels from ships will be low, 
at least in the short term. 

The particulate emissions, under ideal conditions, would 
perhaps be best assessed at the end of the exhaust system, but 
this is difficult to achieve due to the various ship arrangements 
for access, power supplies, space considerations, etc. The dilu- 
tion tunnel attempts to replicate the end of pipe condition to 
some degree in that the exhaust is diluted and cooled to a 
known point before sampling takes place. 

The sampling position used, downstream of the 
turbochargers but upstream of waste heat boilers and 
silencers, avoided changes in deposition between systems and 
thereby allows more direct comparison of engine particulate 
emissions. The particulate measurements made by LR were 
shown to be repeatable and reproducible when using the 
partial flow dilution tunnel technique in this situation. To 
employ this technique for end of exhaust system assessments 
of particulates would introduce greater variability in the 
results and some parties might argue that measurements 
should be undertaken during “soot blowing” periods thereby 
introducing a further variable. 

High speed engines were not included in the LR range of 
assessment. However, the NO, emission levels quoted for Lake 
Constance are closely in line with those quoted for limits asso- 
ciated with ‘Heavy Duty Engines’ used, for example, in road 
haulage. The high speed engines are in general 4-stroke units 
and therefore start from a 25% lower NO, baseline level. A 
considerable amount of work has already been undertaken on 
these engines to control their emission levels. 


From Dr K Banisoleiman 


I should like to congratulate the authors for a very interesting 
paper. 

My question relates to the repeatability of the experimen- 
tally measured data. To what accuracy is the experimentally 
measured data repeatable? 


To Dr K Banisoleiman 


Repeatability of the measured data quoted in the LR report 
was dependent upon many factors, the greater part of these 
being outside the direct control of LR engineers. Without close 
control over engine speed and power, good repeatability is not 
possible, even in the short term. 

However, where power and speed have been well 
controlled, the same engine specification used on different 
ships has produced NO, at the 1000 to 1100 ppm level with 
only a 5 to 10 ppm difference between ships. Over a series of 
engine test bed emission trials only a 40 ppm change in 1200 
ppm NO, was detected between the first and last test despite 
a considerable number of engine build and exhaust system 
changes. Three similar engines in service showed two engines 
to be in very close agreement with the test bed figures quoted 
above, i.e. within a 40 ppm band but one engine produced a 
200 ppm higher level. 

The particulates from any test series have been shown to 
have a repeatability level at least to the first decimal place for 
the power specific measured values. 

The gas analysis is considered repeatable and reproducible 
toa high order of accuracy. A variability in results is introduced 
by small changes in engine build and, when assessing in- 
service engines the accuracy to which engine speed, load and 
fuel consumption can be measured and controlled in practice. 
These shortcomings can far outweigh the influence of minor 
errors in analytical techniques. 


From Mr L A Smith 


The large marine two-stroke engines are the most fuel efficient 
of any heat engine yet developed, but, as a consequence of the 
associated long combustion times and high gas temperatures, 
suffer from relatively high level of NO, emissions. What funda- 
mental design changes would need to be made in order to retain 
the high fuel efficiency but at the same time reduce the NO, 
levels? 

In the authors’ presentation they have described the current 
development and application of emission modelling in the TIPEE 


Department. What are the general long term goals and direction 
of this research programme, and, in particular, have they consid- 
ered the potential of neural network models in this field? 


To Mr L A Smith 


The NO,-fuel consumption trade-off is a major area of consid- 
eration for all engine developers with a general view that any 
reduction in NO, will have a detrimental effect on fuel 
consumption and vice versa. 

From a fundamental viewpoint this notion cannot be 
supported, provided one can control the timing and rate of 
combustion inside the cylinder. It is well known that injection 
retard reduces NO,, albeit with some increase in fuel consump- 
tion. Also, the fuel-wall impingement with subsequent fuel 
evaporation and combustion, off the combustion chamber wall, 
has similar effect. Although simple retardation of injection or 
wall impingement is known to be detrimental to fuel consump- 
tion, imposition of control on such processes as control of 
injection pressure and injection rate could change the above 
trade-off patterns. The use of injection retard, high injection 
pressure and change in cylinder compression ratio are believed 
to have positive effects in reducing both NO, and fuel consump- 
tion. The application of electronic control will be essential to 
control the in-cylinder rate of heat release in order to arrive at 
an optimum solution. 

Use of water emulsified fuel is also known to reduce NO, 
significantly without detrimental effect on fuel consumption. 
Indeed, in the majority of reported test cases, a reduction in fuel 
consumption and exhaust smoke level is also reported. The 
effectiveness of water injection in this respect is no longer in 
question, but how it is going to be done and what sort of side 
effect this will create, are the subject of current research. 

The future development of our emissions prediction capa- 
bility will primarily be in-line with the MERLIN programme 
and long-term development of an integrated ship propulsion 
system analysis capability comprising submodels as shown in 
Figure 1. This will provide LR with a comprehensive computer- 
aided engineering environment for analysis of a full propulsion 
system and its individual components. 
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Schematic of a vessel’s dynamic model for emissions prediction 
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Vehicle certification duty cycle emissions prediction 


Another area of expansion could be predictions of emissions 
over vehicle certification duty cycles to reduce the time and cost 
of engine developments. For this purpose, the models for 
systems shown in Figure 2 need to be developed. This is 
currently of interest to the automotive industry in view of 
significant legislative pressures to reduce exhaust emissions. 

Engine noise emissions can be predicted through analysis 
of mechanical, combustion and airborne noise levels. This 
could be another area of expansion in view of the availability 
of basic models such as inlet and exhaust system gas dynamics 
and combustion in MERLIN. 

As to the role and usage of Neural Network (NN) technol- 
ogy, we have used it to predict emissions under both 
steady-stage and transient operating conditions. The NN and 
phenomenological approach to emissions prediction could be 
used in parallel in order to take advantage of both capabilities. 
As far as engine design is concerned, NN has little to offer but, 
during the operation phase of an engine, NN may be used for 
monitoring purposes. 


From Mr I Thomas 


Will the proposals laid out in the forthcoming Marpol Annex VI 
benefit LR in terms of increased business? 


To Mr I Thomas 


There are many areas in the forthcoming Annex VI of 
MARPOL 73/78 in which LR could become involved. The 
proposed regulations will require ships to be surveyed and 
issued with an International Air Pollution Prevention 
Certificate in much the same way as ships are surveyed for 
compliance with Annex I to MARPOL 73/78. Air Pollution 
Prevention Certification relating to NOx emissions from diesel 
engines will also be required. 

Itis envisaged that the Classification Societies will be autho- 
rised by various governments to carry out surveys and issue 
certification for compliance with Annex VI on their behalf. This 


would require the plan approval of systems installed for 
compliance with the regulations as well as initial and period- 
ical surveys. Additional areas which are likely to generate 
work include: type testing of equipment such as incinerators, 
undertaking and/or witnessing engine trials for NO, quantifi- 
cation, and consultancy work via MARSPEC to assist owners 
to comply with the regulations. With the likely introduction of 
marine oil fuel sulphur limits as a result of these regulations 
analysis of fuel sulphur levels would also assume a major 
importance. 

Introduction of Annex VI to MARPOL should therefore be 
of considerable benefit to LR in terms of increased business. 
The extent of business will, however, be dependent upon the 
success of the Classification Societies in making it known to 
governments that they are willing and equipped to take on the 
full range of survey and certification work associated with the 
new Annex. 
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SYNOPSIS 


The paper reviews developments in safety regulation from the 
Robens report in 1970 through to the present day. The change 
from a prescriptive approach to one based on goal setting regu- 
lations and risk is described, against the backdrop of a number 
of significant major accidents. The contents of safety cases are 
considered together with the roles and responsibilities of the 
operator and the regulator. A number of existing safety case 
regimes are examined together with some of the experiences 
reported in preparing and reviewing safety cases. The nuclear, 
industrial major hazard, offshore and railway regimes are 
briefly described. The extension of this approach to the marine 
industry, as recommended by a number of reports is discussed 
and some difficulties anticipated. The conclusions point to an 
inexorable move towards a risk based approach to safety 
demanded both by regulators and the general public. 


1. INTRODUCTION 


Developments in engineering since the industrial revolution 
have taken place in response to demands for more power, more 
speed, higher output, greater efficiency and better functionality 
and engineers have responded by pushing designs and mate- 
rials to their limits. From working largely in the dark the 
knowledge of behaviour of materials and structures has 
evolved to a point where failure mechanisms and behavioural 
properties are well understood and design methods are highly 
sophisticated. The nature of ‘loads’ on engineering structures 
is still perhaps the area where there continues to be greatest 
uncertainty. 

This evolution has, however, been accompanied by a series 
of major disasters in which there has been serious loss of life, 
damage to the environment and often loss of the asset. Such 
incidents have been deemed to be unacceptable by society, 
especially where ‘innocent’ people have been involved. As a 
result statutory regulations have been put in place to indepen- 
dently govern engineering activities which have an impact on 
other people so as to ensure an acceptable level of safety. In 
parallel, engineering standards have been developed and used 
to ensure consistency in design. Both types of ‘standard’ 
embody the results of service experience, lessons learnt from 
accidents and the fruits of research and development and 
provided they are kept up to date can be thought of as repre- 
senting ‘best current practice’. 

Until relatively recently engineering accidents largely 
resulted from failures in design and materials and the response 
was to develop more controls in the form of updating codes, 
regulations and standards. More recently the causes of major 
accidents have been related to operational failings and the 
responsibility of the owner or operator for safe management of 
the undertaking has been emphasised. In addition various tech- 
niques and approaches have been developed which enable 
engineers to anticipate risk arising from problems during oper- 
ation and so deal with them in an appropriate way in design. 
Modern safety assurance now formally recognises the impor- 
tance of achieving safety in both design and operations and this 
is expressed in the concept of the safety case. An owner or oper- 
ator in many industries now has to make an adequate case to 
the regulator for the safety of his undertaking before securing 
a licence to operate. The purpose of this Paper is to explore what 
this means in practice in a number of different industries and 
to review the effect it is having on safety assurance. The Paper 
unashamedly draws on the findings of a number of reports and 
papers on the subject. These are referenced in section 7. 


2. DEVELOPMENT OF THE RISK BASED 
APPROACH TO SAFETY 


2.1 The Robens Report 


In the 1960's it was recognised that the law which governed the 
health and safety of people at work needed a complete re - 
think. Not only was the law at that time fragmented but it was 
not dealing adequately with the problems of new technology. 
In addition, during the previous decade there had been no 
discernible trend in the reduction of accidents. Lord Robens 
was appointed in 1970 to: 

“... review the provision made for the safety and health of 
persons in the course of their employment ...” 


In his report Lord Robens laid emphasis on the need for self 
regulation, and some other relevant extracts are reproduced 
here: 


“... the first and perhaps most fundamental defect of the 
statutory systems is simply that there is too much law ...” 


“... There is a lack of balance between the regulatory and 
voluntary elements of the overall ‘system’ of provision for 
safety and health at work. The primary responsibility for 
doing something about present levels of occupational acci- 
dents and diseases lies with those who create the risks and 
those who work with them. The statutory arrangements 
should be reformed with this in mind. The present approach 
tends to encourage people to think and behave as if safety and 
health at work were primarily a matter of detailed regulation 
by external agencies. [Ref 1 para 457] ...” 


“... Present regulatory provisions follow a style and pattern 
developed in an earlier and different social and technical 
context. Their piecemeal development has led to a haphazard 
mass of law which is intricate in detail, unprogressive, often 
difficult to comprehend and difficult to amend and keep up 
to date. It pays insufficient regard to human and organisa- 
tional factors in accident prevention, does not cover all work 
people and does not cover comprehensively and effectively 
with some sources of serious hazard. These defects are 
compounded and perpetuated by excessively fragmented 
administrative arrangements. [Ref 1 para 458] ...” 


He went on to conclude that this type of system encouraged 
excessive reliance on state regulation and “too little on personal 
responsibility and self generating effort” 

The basic philosophy of the report is that control which 
emphasizes detailed regulations is not appropriate to modern 
technology and that self regulation by industry itself, exercis- 
ing a more open ended duty of care is likely to be more 
satisfactory. The report also emphasized the need for a compre- 
hensive approach to safety and the importance of management 
attitudes and organisational systems in achieving this. It advo- 
cated more explicit and formal safety systems for companies 
including statements of safety policy, the establishment of a 
single national authority, and the reform of legislation. Lord 
Robens also recognised the problem of ‘major hazards’, and 
their impact on public safety. He recommended special provi- 
sions be made for dealing with explosive, flammable and toxic 
substances and following the Flixborough disaster in 1974 the 
Advisory Committee on Major Hazards was established. The 
importance of this report as a foundation for modern safety 
assurance thinking should not be underestimated. The conclu- 
sions and recommendations underpin many of the subsequent 
developments in safety regulation. 


2.2 The Health and Safety at Work Act 1974 


The need for the operator or individual to take responsibility ¢ 


himself and not to rely merely on compliance with regulation 
when considering his own safety and the safety of others is a 
fundamental principle which emerged from the report. 
Expressed in another way, those who create the risks must take 
primary responsibility for controlling those risks. These were 
embodied in the Health and Safety at Work (HSAW) Act 1974 
which came into operation on 1 April 1975. The act is a piece 
of enabling legislation to provide a framework for a compre- 
hensive system of regulations and approved codes of practice. 
The Act covers all persons at work including employers, 
employees and the self employed. It also extends to the general 
public in so far as they are affected by work activities. General 
duties are imposed by the Act on employers, employees, the 
self employed and manufacturers and suppliers. The employer 
is required to provide and maintain safe plant and safe systems 
of work. In addition he has the statutory duty of safeguarding 
as far as reasonably practicable the health, safety and welfare 
of his employees. The employer is also required to provide a 
statement of safety policy, to put in place a safety organisation 
and provide safety information and training. The employee 
and self employed have a duty to take reasonable care to avoid 
injury to himself or others by his work activities and to coop- 
erate with his employer or others in meeting statutory 
requirements. 

The Act established the Health and Safety Commission 
(HSC) whichis responsible for the development of policy under 
the Act. The executive arm of the HSC is the Health and Safety 
Executive (HSE), which is responsible for implementation and 
enforcement except in the case of consumer premises and 
offices in which case the local authority is responsible. Safety 
legislation has been progressively reformed and new legisla- 
tion developed under the control of the HSAW Act. This 
includes the CIMAH (Control of Industrial Major Accident 
Hazards) Regulations and the Offshore (Safety Case) Regula- 
tions $12885:1992. 

Since the early 1970’s there have been a number of major 
accidents each of which has been followed by detailed public 
enquiry resulting in a significant change in safety regulation 
for the industry concerned. Much of the change of direction has 
been modelled on the principles that emerged from Robens. 
The most significant accidents are mentioned here with an 
appropriate extract from the inquiry report. Descriptions of 
these events are taken either from the enquiry reports them- 
selves or from [Ref 2] 


2.3 The Flixborough Disaster 1974 


The Flixborough disaster was by far the most serious accident 
which had occurred in the UK chemical industry for many 
years. 


“... At about 4.53 pm on Saturday 1st June 1974 the Flixbor- 
ough works of Nypro(UK) Ltd were virtually demolished by 
an explosion of warlike dimensions. Of those working on the 
site at the time, 28 were killed and 36 suffered injuries. If the 
explosion had occurred on an ordinary working day, many 
more people would have been on site and the number of casu- 
alties would have been much greater. Outside the works, 
injuries and damage were widespread but no one was killed. 
Fifty three people were recorded as casualties by the bureau 
established by the police; hundreds more suffered relatively 
minor injuries which were not recorded. Property damage 
extended over a wide area, and a preliminary survey showed 
that 1821 houses and 167 shops and factories had suffered to 
a greater or lesser extent. ...” 


The lessons learned from the disaster are summarised in Table 1 
and range from the public control of major hazard installations 
and siting of them through the management of such installa- 
tions by industry to the development of new pressure system 
regulations [Ref 3] governing the integrity of containment 
systems. 


Table 1 - Important Lessons from the Flixborough Accident 


Public Control of major hazard installations 
Siting of major hazard installations 
Licensing of storage of major hazard installations 
Regulations for pressure vessels and systems 
The management system for major hazard installations 
- structure 

people 
- systems and procedures 
- safety officer 
Relative priority of safety and production 
Use of standards and codes of practice 
Limitation of inventory in the plant 
Engineering of plants for high reliability 
Dependability of utilities 
Limitation of exposure of personnel 
Design and location of control rooms and other buildings 
Control and instrumentation of plant 
Decision making under operational stress 
Restart of a plant after discovery of a defect 
Control of plant and process modifications 
Security and control of access to plant 
Planning for emergencies 
Various metallurgical phenomena 
Unconfined vapour cloud explosions 


Investigation of disasters and feedback of information on 
technical incidents 


2.4 The Seveso Incident (1976), EEC Directive and ACMH 


On 10th July 1976 a safety valve vented on a reactor at the 
Icmesa chemical company works at Seveso, a town of about 
17,000 inhabitants, some 15 miles form Milan. A white cloud 
drifted over part of the town, heavy rain fell and brought the 
cloud to earth. The release occurred from a reactor producing 
trichlorophenol and contained a substance known as TCDD. 
This is one of the most poisonous substances known and has 
been shown to be fatal to animals in doses of 10° times their 
body weight. It is known to have carcinogenic and mutagenic 
properties. It has been estimated that 2kg of TCDD were 
released. 

The company took emergency action within the works but 
had difficulty contacting local authorities due to the weekend 
holiday. For several days little happened. It was reported that 
the local authorities had difficulty in obtaining information 
from the company about the chemicals involved. In the imme- 
diate vicinity the vegetation was contaminated and animals 
began to die. On the fourth day the first child fell ill and a 
state of emergency was declared. On 27th July an evacuation 
of 250 people took place. By the end of July 250 cases of skin 
infection had been diagnosed, 600 people had been told to 
evacuate their homes and some 2,000 people had been given 
blood tests. In early August it was found that the area contam- 
inated was about five times that originally thought. This 
larger area contained some 40 factories. The release posed 


major problems for the Italian authorities who were obliged 
to seek international assistance in medical diagnosis, treat- 
ment and decontamination. The local authorities were 
advised to treat the factory as if it were the site of a nuclear 
accident. 

No publicly available report on the Seveso incident has been 
issued but like Flixborough the incident had a profound effect 
on the thinking about process hazards. The Italian authorities 
recommended to the EEC authorities in Brussels that European 
action should be taken to address major accident hazards which 
had the potential to affect large areas, possibly even neighbour- 
ing countries. The EEC authorities turned to the UK where the 
Advisory Committee on Major Hazards (ACMH) had already 
drafted the Hazardous Installations (Notification and Survey) 
1978 Regulations. These were never published in the UK as they 
were used as the basis for EEC Directive 82/501 EEC — which 
became known as the Seveso Directive. As with all directives 
the regulations have no force of law until implemented in the 
individual member states and in the UK was introduced as the 
CIMAH (Control of Industrial Major Accident Hazards) Regu- 
lations under the Health and Safety at Work Act. 


2.5 The Canvey Island Studies (1978 and 1981) 


The Advisory Committee on Major Accident Hazards 
produced two reports in 1976 and 1979 giving recommenda- 
tions for the control of major hazard installations. The general 
approach was to avoid detailed governmental regulation and 
to move to a system of control by self regulation as encouraged 
by Lord Robens. The elements of the system of control included 
the following: 


- hazard notification, 


— hazard reporting including a survey and detailed assess- 
ment, 


— hazard control including a framework and minimization 
of exposure, 


— planning control. 


Both the local authority and the HSE have an interest in the 
planning issues and the siting of hazardous installations and 
current practice is for applications to be submitted to the HSE 
who provide advice to the local authority. At the time these 
issues were being developed it was recognised that action to 
close down existing sites or revoke permissions already 
granted raised issues of compensation. This was highlighted 
by a decision to revoke planning permission for an additional 
oil refinery to be sited at Canvey Island. 

The HSE commissioned a detailed hazard assessment of 
industrial development at Canvey and this was the first time 
in the world such a study had been undertaken. The investiga- 
tion involved the identification of principal hazards of the 
installations and activities in the area, the assessment of asso- 
ciated risks to society and to individuals and the proposal of 
modifications to reduce these risks. Some 30 engineers and 
scientists were involved in the study. 

The first report [Ref 4] analysed the kind of accidents which 
would have potential to injure people living in the area, 
assessed the likelihood of their happening, and assessed the 
chances that if they happened, people might be injured by them. 
The report made broad estimates of the risk to people living in 
particular parts of the area. It concluded that the scale, nature 
and concentration of the industrial installations in the area was 
such that certain actions were desirable to substantially reduce 
the chances of a major accident or minimise the consequences 
should one occur. However provided these were carried out 


the HSE did not consider that the residual risks would be such 
as to justify any of the existing installations to be closed down. 
Three years later, following implementation of the actions and 
other major changes, a reassessment was made and a very 
marked reduction in risk levels was found. These results were 
published in a second report. [Ref 5] 

The study demonstrated that risks from disparate hazards 
could be compared using a formal risk assessment methodol- 
ogy and that quantification of the level of safety was possible 
in a way which could be readily understood. The reports from 
the study are regarded as a turning point in the development 
of quantitative risk assessment (QRA) and marked its accep- 
tance as a valid approach. As a result a similar approach to the 
assessment of hazards is now a common requirement of the 
different safety case regimes. 

A great deal of work has subsequently been undertaken on 
understanding the nature of risk and how to communicate it 
to the general public. Discussion of this is outside the scope of 
this paper, for a more detailed study readers are referred to 
[Refs 6,7]. 


2.6 Piper Alpha (1988) 


On the evening of 6th July 1988 the explosion and subsequent 
fires that destroyed the Piper Alpha rig claimed the lives of 165 
of the 226 persons on board and 2 of the crew of a support vessel 
whilst engaged in rescue duties. The death toll was the highest 
in any accident in the history of offshore operations. 

The public inquiry, chaired by Lord Cullen, published its 
report in November 1990 [Ref 8]. The Inquiry was extremely 
thorough and covered the complete range of issues form hard- 
ware design and integrity through to day to day management 
of safety including organisation and responsibilities. 


“... From an early stage in the Inquiry it became clear that 
there were a number of features in the physical arrangements 
on and the management of Piper Alpha which were such as 
to render it vulnerable to dangerous incidents, whether or not 
they contributed to the disaster. This led to a range of addi- 
tional topics coming under consideration including permit 
to work procedure and practice, active fire protection and 
preparation for emergencies. This led the Inquiry to investi- 
gate how these deficiencies could have failed to be corrected 
by Occidental’s management of safety or detected by the regu- 
lar inspections and surveys which were carried out by 
regulatory bodies. ...” [Ref 8 para 2.18] 


All 106 recommendations made in the report were accepted by 
the government of the day and have led to a complete revision 
of the way safety is regulated in the offshore industry. Foremost 
amongst the recommendations were those concerning the 
Safety Case: 


“... The operator should be required by regulation to submit 
to the regulatory body a Safety Case in respect of each of its 
installations. ...” 


“... The Safety Case should demonstrate that certain objec- 
tives have been met, including the following: 


(i) that the safety management system of the company and 
that of the installation are adequate to ensure that (a) 
the design and (b) the operation of the installation and 
its equipment are safe; 


(ii) that the potential major hazards of the installation and 
the risks to personnel thereon have been identified and 
appropriate controls identified; and 


(iii) that adequate provision is made for ensuring, in the 
event of a major emergency affecting the installation 
(a)a Temporary Safe Refuge for personnel on the instal- 
lation; and (b) their safe and full evacuation, escape and 
rescue. ... 


3. THE RISK BASED APPROACH TO SAFETY 


3.1 Regulations — Prescriptive vs Goal Setting 


Lord Robens [Ref 1] stated that: 


”... Regulations which lay down precise methods of compli- 
ance have an intrinsic rigidity, and their details may be 
quickly overtaken by new technological developments. On the 
other hand lack of precision creates uncertainty. ... We believe 
that, wherever practicable, regulations should be confined to 
statements of broad requirements in terms of the objectives to 
be achieved. Methods of meeting the requirements may often 
be highly technical and subject to frequent change in the light 
of new knowledge. They should therefore appear separately 
in a form which enables them to be readily modified. 
[Ref 1 para 138] ...” 


In his Inquiry report into the Piper Alpha disaster Lord Cullen 
concluded that in the offshore industry an overly prescriptive 
approach to regulation had developed which actually 
detracted from assuring a safe facility. He stated: 


“.,. twas undesirable to have a detailed prescriptive legislative 
approach. It stifled technology and advancement and at the end 
of the day it was counter productive. The dangers of over 


, 


prescriptive regulation are ... clear from this evidence. ...” 


Healso identified problems in communications and the manage- 
ment structure which contributed to the disaster, and concluded 
that such areas are not amenable to control by prescription. In 
this context prescriptive regulations includes rules, codes, stan- 
dards and guidance notes of a prescriptive nature. 

The prescriptive approach however is well suited to 
embodying the results of historical evidence, service experi- 
ence and research and development. Furthermore the 
demonstration of compliance is relatively straightforward, 
there is not usually a need for detailed analysis in design and 
hence are ideal for ensuring minimum acceptable levels of 
safety, integrity and reliability are achieved especially for single 
items of equipment. However the perceived disadvantages are 
that development tends to be reactive, the scope is frequently 
narrow and they can inhibit innovation. 

The technical content of prescriptive regulations is not in 
question, rather the danger of becoming over reliant on 
measures which prescribe in some detail how safety is to be 
achieved. The danger is that the designer, owner or operator 
does not understand why the rule or regulation is framed in 
the way itis, merely that he has to comply withit. This approach 
encourages a compliance culture rather than one genuinely 
seeking to maximise safety by the best possible means. 

In response to this modern safety regulations are more 
frequently of the ‘goal setting’ type which set out what has to 
be achieved in terms of high level objectives or performance 
standards rather than prescribing in detail how it has to be 
achieved. This allows more freedom to the designer and oper- 
ator for novel or innovative solutions whilst also placing more 
responsibility on their shoulders for ensuring acceptable levels 
of safety. Thus there is greater flexibility in demonstrating 
compliance although the burden of proof is likely to be greater 
requiring perhaps extensive analyses or tests. A further advan- 
tage is that such regulations are less susceptible to becoming 
obsolete and are therefore ideally suited to areas where tech- 
nology changes rapidly. 

The two different approaches have differing implications 
for the regulator as well as the regulated. In the prescriptive 
approach the regulations are usually sufficiently detailed for 
the surveyor or inspector to verify whether or not they have 


been complied with. In the extreme this can take the form of a 
checklist approach. The goal oriented approach on the other 
hand requires proof, to the satisfaction of the regulator, that all 
foreseeable hazards have been identified and that the company 
has identified means of controlling the risks from those hazards 
to a level which is as low as reasonably practicable. The 
surveyor or inspector is then in quite different territory as he 
will have to be able to demonstrate an equivalent level of exper- 
tise with the designer in deciding whether the risks have been 
properly addressed. 

What is clear is that a regime based entirely on prescriptive 
regulation or entirely on goal oriented regulation does not 
provide a good solution. For many aspects, especially 
concerned with hardware a goal oriented approach is not 
appropriate and the most pragmatic solution is compliance 
with a rule or standard. The goal oriented approach however 
demands an understanding of the safety risks and how they 
arise and is therefore more suited to ensuring that, for example 
system or management issues are addressed. 

The new European product safety directives provide an 
example of how the two sorts of regulation can coexist. These 
‘Article 100’ directives which have been introduced to remove 
technical barriers to trade and ensure a consistent level of safety 
across Europe set out ‘essential requirements’ ina goal oriented 
style establishing what has to be achieved rather than precisely 
how itis to be achieved. The manufacturer then has the freedom 
of demonstrating compliance with these requirements directly 
or of demonstrating compliance with agreed euronorms (stan- 
dards) which have been specifically developed to incorporate 
the ‘essential requirements’. 


3.2 Risk Analysis and Assessment 


A safety regime based on a goal oriented approach requires the 
use of risk assessment in either a qualitative or a quantitative 
way to demonstrate that all foreseeable hazards have been iden- 
tified and the associated risks are understood and controlled. 
In this process, whether it is a detailed analysis or a simple qual- 
itative one we are trying to answer the following questions: 


1. What can go wrong? 
2. How likely is it to go wrong? 
What happens if it does go wrong? 


Does it matter? 


a i 


If it does, what can we do to: 
a) prevent it from going wrong in the first place? 
b) reduce the frequency of its occurrence? 


c) mitigate the consequences of its occurrence? 


These questions are answered in the risk assessment process in 
the following stages: 


1. Hazard Identification 

2. Hazard Analysis 

3. | Consequence Analysis 

4. _ Risk Evaluation 

5. Development of hazard avoidance, risk reduction and 


mitigation strategies. 


The first three stages comprise risk analysis since risk is defined 
as the product of the frequency or probability of occurrence 
(stage 2) and the consequences of that occurrence (stage 3). The 


fourth stage involves making a judgement as to whether the 
estimated risk can be accepted and stage 5, although not strictly 
part of risk assessment, represents the practical decisions taken 
as a result of the process. A detailed description and example 
of QRA is outside the scope of this paper and can be found in 
[Refs 2,9]. 

The Management of Health and Safety at Work Regulations 
(1992) MHSWR are the most important part of the UK imple- 
mentation of the EEC Directive (89/391/EEC). They require 
every employer and self employed person to make a suitable 
and sufficient assessment of the risks to the health and safety 
of their employees and others, including the public, who may 
be affected by their undertaking. Every employer with five or 
more employees is required to record the significant findings 
of thatassessment , and any group of their employees identified 
by it as being especially at risk. A suitable and sufficient risk 
assessment (as required by these regulations) should: 


— identify the significant risks, 


— enable operators to identify and prioritise the measures 
that need to be taken to comply with the relevant statutory 
provisions, 


— be appropriate to the nature of the operation and remain 
valid for a reasonable period of time. 


There are no fixed rules about how risk assessment should be 
undertaken. The assessment will depend on the nature of the 
undertaking and the type and extent of the hazards and risks. 
Above all the process needs to be practical and should involve 
management. For simple hazards, a suitable and sufficient 
assessment can be a very straightforward process based on 
judgement and requiring no specialist skills or complicated 
techniques. For intermediate hazards it may not be possible to 
make a suitable and sufficient assessment without specialist 
advice in respect of unfamiliar risks such as those requiring 
some specialist knowledge of the more complex processes and 
operational systems. For major hazards where the risk occurs 
infrequently but may expose a large number of people a proper 
assessment may require the application of modern techniques 
of evaluation such as quantitative risk assessment (QRA). 


3.3 The ALARP Principle 


The process of risk assessment involves analysis, usually 
implying some form of computation followed by evaluation 
against some scale or criteria in which a judgement is made 
about the level of risk. A discussion of individual and societal, 
voluntary and involuntary risk is outside the scope of this 
paper, readers are referred to [Refs 6,7] for further information. 
For the present purposes individual risk will be considered. For 
assessment purposes this is usually taken to be the risk to the 
most exposed individual. 

There are a number of ways of judging quantified risk esti- 
mated from an analysis. The simplest is to compare it with a 
scale of risk for known and accepted events and the list shown 
in Table 2 provides one such example. 

In the safety case, where quantified risk analysis is involved 
a company will be required to establish risk criteria which are 
then used as a guide in deciding what, if any, further action 
needs to be taken. However, in this process the uncertainty 
inherent in the analysis must be recognised and it is quite unre- 
alistic to set absolute targets to be achieved. It is generally 
recognised that even in the best analysis an estimate of risk 
within an order of magnitude of the correct figure is the best 
that can be hoped for. It is therefore misleading to set an abso- 
lute target and expect to use it as a pass/fail criterion. In an 
earlier version of the Norwegian Petroleum Directorate regu- 


Table 2 - Levels of Fatal Risk per annum 
(average United Kingdom figures approximated) 


1 in 100 Risk of death form five hours of solo rock climbing 
every weekend 

1 in 1000 Risk of death due to work in high risk groups within 
relatively risky industries such as mining 

1 in 10 000 General risk of death in a traffic accident 


1 in 100000 | Risk of death in an accident at work in the very safest 
parts of industry 

1 in 1 million | General risk of death in a fire or from gas explosion at 
home 


1 in 10 million | Risk of death by lightning 


lations a risk target of 10/yr was set as an upper limit for all 
hazardous events. This encouraged analysts to aim to beat this 
figure rather than to consider what the analysis had revealed 
about the level of safety achieved. The figure has now been 
withdrawn and the temptation to seta similar criterion has been 
resisted in the UK legislation. 

The Health and Safety at Work Act requires employers to 
provide ‘so far as is reasonably practicable’ a safe place of work. 
This is not a new phrase being found as far back as the Metal- 
liferous Mines Regs Act 1872. It has occurred in other legislation 
but its recent inclusion in the HSAWA has led to much work on 
defining what it actually means in practice. The principle has 
been tested in the courts and the case of Edwards v National 
Coal Board (1949) provides some guidance. The case concerned 
a man who was the victim of a roof fall and it was held that if 
the whole of the side of the tunnel had been shored up the acci- 
dent could have been prevented. The head note of the case states: 


“... In considering whether or not it was “reasonably prac- 
ticable to avoid or prevent” a breach of the statute.... the 
mineowner must, before the occurrence of an accident, make 
acomputation in which the quantum of risk run by the worker 
was placed on one scale and the sacrifice of the mineowner 
involved in the measures necessary to avoid the risk (whether 
in money, time or trouble) was placed in the other, and, if 
there was gross disproportion between them — the risk being 
insignificant in relation to the sacrifice — the mineowner had 
discharged the onus which was on him. ...” 


In that case there was no evidence that the mineowner had in 
fact made any such computation. 

This principle has been carried forward, from the HSAWA 
enabling legislation, into each of the sets of regulations made 
under it which include risk assessment. The judgement which 
must now be applied to risk is that it must be reduced to a level 
which is ‘As Low As Reasonably Practicable’ (ALARP). 

This principle is illustrated by the ALARP triangle shown 
in Figure 1 developed by the HSE. The width of the triangle at 
any point represents the magnitude of the computed risk. At 
one extreme, the top of the triangle, the risk is so high that it 
cannot be tolerated under any circumstances, itis termed ‘unac- 
ceptable’. At the other extreme the risk is so low that it is 
negligible, this is termed acceptable, meaning that for the 
purposes of life or work we are prepared to take it pretty well 
as it is. In between these two extremes is the ALARP or ‘toler- 
ability’ region in which the risk is only undertaken if some 
benefit is desired. If the risk analysis process shows that a risk 
falls into this region then the application of the ALARP princi- 
ple requires a demonstration that measures have been 
implemented to reduce the risk until the cost of such risk reduc- 
tion measures is grossly disproportionate to the benefit gained. 
Inevitably this will be a subjective decision although the degree 
of subjectivity can be reduced by the application of cost benefit 


Risk cannot be 
justified save in 
extraordinary 

circumstances 


Unacceptable 
region 


Tolerable only if 
risk reduction is 
impracticable or 

if it is grossly 
disproportionate to 
the improvements 
gained 


The ALARP or 
tolerability region 
(Risk is undertaken 
only if a benefit 

is desired) 


Tolerable if cost of 
reduction would 
exceed the 
improvement gained 


Broadly acceptable 
region (No need for 
detailed working to 
demonstrate ALARP) 


Negligible Risk 


Figure 1 The ALARP Triangle 


analysis. In applying this however to safety risks some estimate 
of the value of human life may need to be made. 

The demonstration of ALARP can be difficult because of the 
subjective nature of the judgements involved. It has been 
suggested that demonstrating compliance with best current 
practice as embodied in standards, in the case of hardware, is 
sufficient to satisfy ALARP without further detailed working. 
This may be true provided it can be demonstrated that the stan- 
dards are genuinely applicable. 


3.4 The Human Element and Safety Management 


The analysis of accidents across different industries frequently 
points to ‘human error’ as being the cause in anything up to 
80% of cases. A more thorough analysis reveals that a large 
proportion of these accidents are caused not by the human fail- 
ings of the operator but by failings in the management of the 
plant concerned. 

Trevor Kletz [Ref 10] has categorised human error into five 
types. These are listed in Table 3. 


Table 3 - Types of Human Error 


Slips and lapses of attention the intention is correct but the 


wrong action is taken 
someone does not know what to 


do, or worse, thinks he knows, 
but does not 


a mismatch between the abilities 
of a person and the situation 


Poor training or instructions 


Lack of physical or mental ability 


Lack of motivation or a deliberate 
decision not to follow instructions 
or expectations 


sometimes called violations, 
often errors of judgement as 
often someone sincerely believes 
that it is inappropriate to follow 
instructions 


often due to a lack of 
appreciation of the part they 
should play 


Errors made by Management 


In a sense almost all accidents are due to management fail- 
ings; if they had seen that the plant was better designed or 
maintained, that the training or instructions were better or that 
previous violations were not ignored, the accident would not 
have occurred. 

These conclusions are supported by the Inquiry reports of 
almost all major accidents in recent years in which management 
failings have been identified as root causes. Amongst these the 
fire at Kings Cross railway station, the capsize of the Herald of 
Free Enterprise, the Clapham junction railway accident and the 
Piper Alpha disaster are notable examples. 

Lord Robens identified the importance of management and 
organisational factors in ensuring safety and their importance 
has increased since his report was published. A formal system 
for managing safety is now an essential pre-requisite for any 
installation with hazard potential. The system includes state- 
ments of company safety policy, responsibilities and 
organisation of safety personnel, procedures for the safe oper- 
ation of the installation and details of steps to be taken in the 
event of an emergency. 

There are a number of standards and guides for safety 
management systems including the IMO ISM Code (Interna- 
tional Safety Management Code for Ships) [Ref 11]. These have 
much in common with the quality and environmental manage- 
ment standards in the ISO 9000 (BS 5750, BS 7750) series and a 
health and safety standard along similar lines is in the course 
of preparation. 


3.5 Engineers and Risk Issues 


The Engineering Council represents 290,000 registered engi- 
neers and technicians in the UK. In response to a series of major 
disasters which hit the headlines the Council set up a Working 
party on ‘Engineers and Risk Issues’ to draw together examples 
of good practice in managing engineering risk. The result was 
the publication of a ten point Code of Professional Practice enti- 
tled ‘Engineers and Risk Issues’. The purpose was to encourage 
all registrants to take a broader view of their professional 
responsibilities and particularly to understand engineering 
risk. A further explanatory document entitled ‘Guidelines on 
Risk Issues’ [Ref 12] was published by the Council providing 
a fuller explanation of the issues. The Code was sent to all Engi- 
neering Council registrants and the Guidelines are available 
free to registrants on request. Both documents were sponsored 
by Lloyd’s Register and the Health and Safety Executive. 


4. SAFETY CASES 


4.1 Contents 


The safety of an operation is about more than hardware 
integrity. [tis about more than procedures. It is about the totality 
of features including equipment and people that have a bearing 
on ‘freedom from harm’ or the safety of the operation. The 
safety case is a document describing those features. Definitions 
of the ‘safety case’ are hard to come by because whilst the 
concept is common, each type of case is defined by the appro- 
priate industry regulations. Nevertheless it is universally true 
that the purpose of the safety case is for the operator to provide 
a clear, comprehensive, convincing and defensible argument, 
supported by calculation and procedure that an installation is, 
and will be acceptably safe throughout its life. The safety case 
brings together an analysis of the risks facing an installation 
and the ways in which the operator plans to manage those risks. 
It therefore provides a vehicle for considering safety in a total 
or a ‘holistic’ sense. 

An offshore operator [Ref 13] defined it as “... the operator's 
self written regulatory document which he is bound by law to abide by. 
Primarily it is for his own use to satisfy himself that he has thoroughly 
examined all aspects of his operation and that the operation is safe. The 
secondary purpose is then to demonstrate to and satisfy the HSE that 
a safe operation is being maintained. A tool to manage safety, not just 
a paper exercise. ...” 

In broad terms the safety case should address the hazards 
associated with an installation and the management of those 
hazards. In more detail the following elements are common for 
the major hazard Safety Cases: 


—  acomprehensive description of the installation, 
— details of hazards arising from the operation of installation, 


~ demonstrations that risks from these hazards have been 
properly addressed and reduced to a level which is 
ALARP, 


— description of the safety management system, including 
plans and procedures in place for normal and emergency 
operations, 


- appropriate supporting references. 


The following activities characterise the development of a 
safety case and this process is often referred to as formal safety 
assessment: 


— _ establish acceptance criteria for safety, (environment and 
asset loss, if appropriate) — these may be both risk based 
and deterministic, 


— consider both internal and external hazards, using formal 
and rigorous hazard identification techniques, 


— estimate the frequency or probability of occurrence of 
each hazard, 


— analyze the consequences of occurrence of each hazard, 
- estimate the risk and compare with criteria, 
— demonstrate ALARP, 


- identify remedial measures for design, modification or 
procedure to avoid the hazard altogether, to reduce the 
frequency of occurrence or to mitigate the consequences, 


— _ prepare the detailed description of the installation includ- 
ing information on protective systems and measures in 
place to control and manage risk, 
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— prepare a description of the safety management system 
and ensure that the procedures within are appropriate for 
the risks identified. 


A further common aspect is that all safety cases are required to 
be prepared by the operator himself and either submitted by 
him to the regulator or to be kept ready for inspection if 
required. 


4.2 Role of the Regulator 


The role of the regulator differs from regime to regime. In all 
cases there is a sanction against the operator if the regulator 
decides that he has not made an adequate case for the safety of 
his operations. This usually takes the form of withholding or 
withdrawal of a license to operate. 

The role of the regulator ina safety case regime is very differ- 
ent to that in a prescriptive regime. In the Piper Alpha Inquiry 
evidence was given by Mr. Ognedal of the Norwegian 
Petroleum Directorate concerning the experience in Norway of 
his inspectors operating a regime based on requirements for 
risk analysis. 


”... Mr. Ognedal agreed that in carrying out supervision the 
staff of NPD were now much more involved in making judge- 
ments; and had to have the ability not only to make them but 
to defend them in discussion with management. During the 
auditing process his staff were dealing much more with senior 
managers than was the case before. This meant that they 
required to understand the managerial role and the organi- 
sation that particular managers had under their control. ...” 


The burden of proof that an installation is safe is greater for the 
operator in a risk based regime than it is in a prescriptive 
regime. He has to demonstrate why he has chosen a particular 
design, how it will be safe and how he will ensure its continuing 
safety. The regulator’s position is also more challenging in that 
a much greater degree of judgement is required in accepting 
that an adequate case for safety has been prepared. 


4.3 Existing Safety Case Regimes 


4.3.1 Nuclear Safety Regulation 


The regulatory regime in the nuclear industry is based on a 
goal-setting rather than a prescriptive approach, with the oper- 
ator charged with demonstrating that risks are tolerable and as 
low as reasonably practicable (the ALARP principle). Since this 
has been the approach adopted over many years, companies in 
the nuclear industry have general developed their own set of 
safety and risk criteria which they can demonstrate meet the 
above requirements. These criteria are principally risk-based 
but generally also contain prescriptive, deterministic require- 
ments. 

Projects in the nuclear industry range in size and complexity 
from, at one extreme, Nuclear Electric’s Sizewell ‘B’ nuclear 
power station, and British Nuclear Fuels’ Thermal Oxide 
Reprocessing Plant (THORP) to, at the other extreme, minor 
modifications to existing plant. In between these extremes lie 
many small-to- medium size projects including the construc- 
tion of new waste management facilities, refurbishment of 
existing plants, and decommissioning activities. 

All activities in the nuclear industry are subject to formal 
safety assessment. Typically this could entail 0.5-2.5 man-years 
effort to produce a complete safety case for a small plant. For 
a larger plant the safety case may be decomposed into a number 
of individual plant areas or hazard assessments, each perhaps 


requiring between 3 man-months and 3 man-years; for the 
largest plant this will imply a total effort expenditure running 
into hundreds of man-years. 

For new plant, safety assessment is a continual process 
which begins with the project concept, and, early in the project, 
submissions will be made to the regulator (Her Majesty’s 
Nuclear Installations Inspectorate) justifying the design 
concept with respect to safety. The safety case will then evolve 
throughout the life of the project, increasing in detail as the 
design progresses; the Preliminary Safety Appraisal will be 
followed by a Design Safety Report justifying the detailed 
design. At later stages, before commissioning, an operating 
Safety Appraisal will examine the role of the operator in greater 
detail and will identify safety mechanisms and operating rules 
for the as-built plant. In many sectors of the nuclear industry, 
operating plant are then the subject of 5-yearly safety assess- 
ments, reviewing the safety case in the light of operating 
experience, plant measurements, etc.; such assessments are 
termed “fully-developed” safety cases. Finally, activities to 
decontaminate and decommission plant will be the subject of 
further safety assessment. 

The preparation of these successive safety cases during 
plant design and construction is used by the regulator to impose 
“hold points” on plant construction and commissioning. 

For many types of plant the focus of a safety case is primarily 
on fault conditions, in the sense that there is no exposure of the 
operator to potential health detriment provided the system 
operates exactly as designed. In the case of nuclear plant, 
however, there is a routine low-level exposure of the operator 
and the public to ionising radiation and this must be included 
in the risk evaluation and justification. Hence, in a nuclear 
safety case, the safety of normal operation requires its own anal- 
ysis. 

The difficulties that have been experienced with nuclear 
safety cases, both during preparation and review are 
summarised as follows: 


-  Consistency/coherence 


It will be clear from the description of the regulatory 
regime that safety case engineering in the nuclear indus- 
try is a process which is undertaken in parallel with the 
evolution of the design. 


Itis also the case that the nuclear industry prepares safety 
cases that are very substantial and detailed, and that this 
frequently necessitates the parallel but separate develop- 
ment of assessments covering different plant areas, or 
different hazards. 


These factors contribute to difficulties in maintaining 
consistency within the safety case itself, and consistency 
between the safety case and the evolving plant design and 
its associated documentation. 


- Completeness 


Another difficulty related to consistency is completeness. 
There is a need to demonstrate that all hazards have been 
identified or considered, in order that one can have some 
confidence in the assessed risks. For complex plant in 
which a multiplicity of potential hazards may exist, such 
demonstration of completeness is never straightforward, 
but incompleteness can quickly be revealed if inconsis- 
tencies across plant areas are evident. 


- Cross - referencing 


With the size and complexity of these safety cases the 
correct use of cross referencing between volumes and 
between the safety case and supporting documents is 
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important so that the safety case can stand by itself as a 
stand alone document but also indicate where more 
information can be found if necessary. 


- Quality of QRA 


Given some confidence in the completeness of a hazard 
identification, the next concern must be with the quality 
of the risk assessment. The completeness of the argument 
is clearly a factor, including the clarity with which 
assumptions in performance analysis have been 
presented or justified. Equally important, however, is the 
availability and quality of the data used in the assess- 
ment. There is frequently a shortage of good quality, 
applicable, fault frequency, reliability and consequence 
data (eg release fractions, decontaminate factors) upon 
which to base an assessment. This can necessitate the use 
of unrealistic and pessimistic assumptions, or best esti- 
mates which then prove hard to justify. 


- Human Element 


In constructing the design safety case for a plant it is 
frequently necessary to make assumptions about the way 
in which the plant will be operated, and particularly with 
regard to the organisation, procedures and training of the 
operating staff. These assumptions form an important 
part of the justification of human reliability claims within 
the safety case and must be demonstrated to be valid at 
a later date when the operating regime is established. It 
is often difficult to capture such assumptions embedded 
in the text of a large safety case and its supporting refer- 
ences. 


- The living safety case is kept up-to-date 
updating/ managing change 


In evaluating the findings of a safety assessment further 
difficulties remain. These are perhaps more acute in 
sectors such as the offshore industry which has only 
recently adopted a safety case regime. Operators have 
found it a significant challenge to adjust to the goal 
setting regime, which requires them to decide what 
safety provisions to effect to achieve a tolerable risk, and 
many prefer instead the prescriptive arrangement where 
compliance was simply demonstrated. The question of 
what constitutes ALARP is better established in certain 
industries, such as nuclear, than in others, such as 
offshore, with generally agreed monetary values being 
routinely used in the nuclear industry to undertake cost- 
benefit analysis. 


The standard format for a safety case in the nuclear, offshore 
and process industries contains what is often a lengthy 
description of the plant and process. While undoubtedly an 
important part of the safety case, the writing of the description 
is probably the most tedious element in the overall process, 
and is increasingly delegated to technical authors. 

A great deal of effort and frustration is often involved in 
maintaining and controlling the use of the up-to-date reliabil- 
ity and consequence data, and ensuring that all assessments 
are using approved and valid data. 

Sensitivity analysis is an important part of any safety case, 
as it provides the necessary demonstration of robustness. It 
can also be used more specifically, however, to identify safety 
mechanisms and operating rules. It is usually straightforward 
to undertake sensitivity analysis on individual hazard assess- 
ments contributing to the complete safety case, but difficult, if 
not impossible, to carry out sensitivity analysis on the 
complete safety case. 


Other issues which have been identified are concerned with 
highlighting shortcomings in individual safety case arguments, 
maintaining consistency within a large safety case, and maintain- 
ing consistency between a safety case and an evolving design. 


4.3.2 Industrial Major Hazards - CIMAH Regulations 


The Control of Industrial Major Hazard (CIMAH) Regulations 
were introduced in 1984 as the UK implementation of the EEC 
Seveso Directive, (82/501/EEC). (This Directive was subse- 
quently amended by Directive 91/692/EEC). The Regulations 
were made jointly under the Health and Safety at Work Act and 
the European Communities Act. This is one of the few areas 
where the HSE’s remit has been extended to cover environmen- 
tal issues. The Regulations require operators of industrial 
installations where quantities of hazardous substances are 
stored, produced or processed to prepare Safety Reports for 
submission to the Health and Safety Executive. These 
substances are predefined in a list in the regulations which 
identify different categories of site according to the hazard 
potential and the quantity of substance present on site. The 
report is to contain the following information: 


— a description of the installation including its operations, 
location and siting, 


—  acomprehensive description of the dangerous substances 
on site, 


— information concerning the identification, prevention, 
control and mitigation of potential major accidents, 


-— details of the management controls in place to manage 
the risks, 


— details of the emergency procedures, the numbers of 
people involved, both on and off site, and the risks to them. 


These safety reports are sent to the Health and Safety Executive 
who, although not explicitly required to ‘accept’ them, never- 
theless has a statutory role to form a judgement as to the 
adequacy of the case. These safety reports are then used as a 
basis for auditing and site inspections. 

The HSE has received between five and six hundred safety 
reports from the CIMAH sites and these have been reviewed 
against the following criteria: 


— assessment of content against CIMAH regulations, 


— assessment of the adequacy of the investigation of the 
hazards and risks, 


— validation of the case contents against site conditions, 


— _use as an element in prioritising future site inspections. 


A number of problems have been regularly encountered in 
assessing submitted safety reports against the above criteria 
and these are reported by HSE [Ref 14] as being: 


i) Errors of Facts. These include significant errors in inven- 
tories, locations, procedures, parameters, descriptions of 
hardware and software which are either at variance with 
known aspects of the site, or which do not survive even 
a preliminary validation exercise. 


ii) Inadequate identification of sources and sizes of events. 
Where limitations in the size or type of incident consid- 
ered are proposed, the limitations should be justified 
appropriately. 


iii) Inadequate justification of consequence limitation. Again 
the validity of assumptions made should be demon- 
strated. 

iv) ‘Black box’ methodologies and assumptions. Unless the 


methodologies are in the public domain, their basis and 
sensitivities should be clearly shown. 


v) Inadequate consideration of escalation risks (particularly, 
but not solely, in complex plant situations). 


vi) The validity, availability and reliability of relevant safe- 
guards, both hardware and software. Performance of 
these elements is often considered very conservatively. 

vii) The significance of protective system failure. What are the 
implications ? 

viii) Common mode failures, at both plant and site level. 

ix) Inadequate quantification of consequences and where 


relevant, risks. 


x) The implications of human reliability, and the inherent 
uncertainties. 

xi) Inadequate assessment of management input, and of the 

implications of failure of management systems. 


xii) Risks to on site personnel. 


xiii) Environmental risks. 


The Seveso Directive is currently undergoing major revision 
and a proposal is currently being considered in Brussels for a 
Directive on the Control of Major Accident Hazards involving 
dangerous substances (Comah) (94/C 106/04). This proposal 
goes well beyond the original Seveso Directive and seeks to 
ensure that all those in control of major hazard plants through- 
out the Community provide a consistently high level of safety. 
In so doing it recognises the uneven application of the Seveso 
Directive throughout the member states. 

The proposal extends to all plant where dangerous 
substances are present and requires that the operator should 
take all measures necessary to prevent accidents which could 
have serious consequences for man and the environment, and 
to limit the consequences thereof. In addition a major accident 
prevention policy will be required for those with smaller quan- 
tities of dangerous substances and a safety report (safety case) 
where there are significant quantities. In the latter case internal 
and external emergency plans will also be required to respond 
to major accidents and to create systems to ensure the plans are 
tested and revised as necessary. 

Operators will also have to cooperate with each other in 
reducing the risk of major accidents in the case where estab- 
lishments are sited so close together such that escalation of an 
accident could occur. Land use planning policies will have to 
take these issues into account and ensure adequate separation 
of hazardous plant from centres of population. The Directive 
will seek to lay down at a Community level essential require- 
ments for management systems which will be suitable for 
controlling major accident hazards. The public will have access 
to safety reports produced by the operators and there will be a 
duty to inform the Commission of major accidents to ensure 
that the information can be widely disseminated and the appro- 
priate lessons learnt. 

The proposal sets out a list of named substances with quan- 
tities which qualify which aspects of the Directive are to apply 
and also a list of categories of substances such as toxic, oxidis- 
ing, explosive etc with appropriate definitions to cover other 
substances not specifically named. The Directive is likely to be 
adopted by the EU in 1995. 


4.3.3 Offshore Safety Cases 


In the offshore industry, in contrast to the nuclear and industrial 
major hazard industries, a goal-setting regime has been intro- 
duced only in the last few years, based on the recommendations 
of Lord Cullen following his enquiry into the Piper Alpha disas- 
ter. Lord Cullen based his proposals on the CIMAH Regulations 
but recognised that given the nature of offshore operations 
decided that the offshore regime should go further than 
CIMAH in a number of respects. 

The Offshore Installations (Safety Case) Regulations 1992 
were developed by the Health and Safety Executive, in coop- 
eration with industry, after they assumed responsibility for 
offshore safety from the Department of Energy and the Depart- 
ment of Transport. 

In these regulations the person responsible for preparing the 
safety case, usually the operator, is referred to as the duty 
holder. The aspects which go beyond CIMAH are|[Ref 15]: 


— that the duty holder’s standards for management of 
health and safety and the control of major hazards should 
be subject to formal acceptance (by the HSE) and that 
beyond a transitional period, any installation whose 
safety case has not been accepted will not be allowed to 
operate; 


— that measures to protect the workforce should include 
arrangements for temporary refuge from fire, explosion 
and associated hazards during the period for which they 
may need to remain onaninstallation following an uncon- 
trolled incident, and for enabling their evacuation, escape 
and rescue; 


— that suitable use should be made of quantitative risk 
assessment as part of the demonstration of the adequacy 
of preventive and protective measures, including tempo- 
rary refuge; and 


— formal requirements relating to safety management and 
audit. 


The regulations require that a safety case is prepared at various 
stages in the life cycle of an installation. It is intended to be a 
living document updated to reflect changes in technology or 
operating circumstances. For a fixed installation the operator 
is required to submit: 


a design safety case which describes how the design will 
provide for inherent safety, the means of verifying the 
quality of detailed design and construction, and the 
systems to achieve safe offshore construction and 
commissioning. This safety case should be submitted 
early enough to enable the duty holder to take into 
account in the detailed design any issues raised by the 
HSE; 


— a pre-operational safety case, which describes the instal- 
lation, activities and systems and the limits for safe 
operation. The safety case should be submitted six 
months before any drilling operation from the installation 
which is likely to release hydrocarbons or before hydro- 
carbons are brought onto it for the first time through a 
pipeline or well; 


— an abandonment safety case which describes the 
proposed methods for decommissioning plant, closure of 
wells, and removal of the structure. The safety case should 
be submitted six months ahead of the commencement of 
decommissioning. 


For mobile installations the regulations require a vessel safety 
case, to be prepared by the owner and submitted to the HSE 
three months prior to operation in relevant waters. This safety 
case should describe the installation and the range of conditions 
for which it has been designed to operate safely. The HSE recog- 
nised that mobile rigs are built in accordance with international 
standards and class requirements and may or may not be 
intended for service in UK waters. The requirement for a design 
safety case would therefore be difficult to implement. 

The principal matters to be demonstrated in safety cases are 
that: 


— the management systems is adequate to ensure compli- 
ance with statutory health and safety requirements; 


— adequate arrangements have been made for audit, and 
the preparation of audit reports; and 


— all hazards with the potential to cause a major accident 
have been identified, their risks evaluated, and measures 
taken to reduce risks to persons to as low as reasonably 
practicable. 


The Regulations contain a number of schedules which set out 
the matters which have to be addressed in a safety case. The 
schedules for a design safety case and a pre operational safety 
case for a fixed platform and a safety case for a mobile unit are 
reproduced in Appendix 1. 

All safety cases, except those for the design of fixed instal- 
lations, are required to be formally accepted by the HSE as a 
condition for continued operation. Once the safety case has 
been accepted the duty holder is legally bound to operate in 
accordance with it. The safety case is required to be updated 
when modifications to the installation or its systems are made 
and periodically, every three years to reflect changes in tech- 
nology. Additional safety cases are to be submitted for 
combined operations, eg when a mobile rig is drilling adjacent 
to a fixed installation. 

Structuring the documentation in a safety case is important 
in preparing a clear and easily referenced document. Safety 
Technology have assisted a major owner of mobile drilling rigs 
in preparing a number of safety cases. The structure of the docu- 
mentation is shown overleaf in Figure 2. 


Voluntary Safety Case Experience 


While preparing the safety case regulations and guidance the 
HSE asked a number of offshore operators to prepare Voluntary 
Safety Cases for a range of installations from fixed large to 
mobile to crane vessels in order to provide both industry and 
HSE with experience of preparing and reviewing the cases. 

The findings of this exercise were reported in a conference 
held in 1993 [Ref 16] and are summarised here. These conclu- 
sions provide a useful insight into the problems of getting to 
grips with a risk based approach to safety. The industry 
perspective of preparing safety cases was provided by UKOOA 
and IADC: 


-— size of the safety case, achieving the optimum balance 
between brevity and adequate demonstration of safety, 
— the use of reference material, 


— the need to ensure clarity for all readers including oper- 
ating personnel, 


— the need to consider issues from all disciplines, 
— the setting and selection of risk criteria, 


~ the demonstration of ALARP, 
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Figure 2 Structure of Documentation for an Offshore Safety Case 


- the need to have a single coordinator, 


e - the control of consultants and use and involvement of the 
workforce. 


Inreviewing the VSCs the HSE made the following observations: 


- safety management systems were weak on independent 
audit and control, 


— major hazard identification studies were incomplete, 


~ performance standards were often not in evidence to 
demonstrate measurability, 


— quality was undersold, incomplete or poor organisation 
of the case, focusing too much on the status quo, 


— accessibility, too long or too much detail or too difficult 
to find information, 


- improvement procedures must be risk based and timely. 


One of the essential pre-requisites for the successful use of 
quantitative risk assessment in offshore safety cases identified 

8 by Lord Cullen was the availability of failure frequency data. 
Whilst various cross industry projects had collected generic 
data, eg OREDA [Ref 17] and WOAD [Ref 18], more up to date 
data sources were required. The HSE has initiated a number of 
research projects in response to specific recommendations in 
the Cullen report to gather failure data and to make it available 
for use in future risk assessments. 

Other offshore administrations are following the recom- 
mendations set out in the Cullen report in moving towards a 
safety case regime. Amongst these are Australia, Denmark and 
Holland. The regime in Norway which is based on the prepa- 
ration of risk analyses and pre dates Piper Alpha has also 
incorporated some of the findings of the Inquiry. 


4.3.4 Railways 


The Railways (Safety Case) Regulations 1994 made under the 
HSAW Act came into force on 28 February 1994. The Regula- 
tions were prepared in response to the privatisation of the 
railways in the UK which will allow new operators onto the 
railway system, divide control between different companies 
and potentially introduce new and inadequately controlled 

ee] risks. The privatisation started in April 1994 with the creation 
of Railtrack, a government owned company, independent of 
British Rail to control the national rail infrastructure, eg the 
track itself and signalling systems. 

The Regulations set out a hierarchical system in which most 
train and station operators will have to prepare safety cases and 
have them accepted by the infrastructure controller before 
starting, or in the case of an existing operation continuing, to 
operate. The infrastructure controllers’ safety case and certain 
trainand station operators’ safety cases will have to be accepted 
by the HSE. As in the offshore regime, an operator has a legal 
duty to conform with an accepted safety case, and the case has 
to be completely reviewed every three years. 

Guidance to the Regulations [Ref 19] indicates that the safety 
case serves two main purposes: 


— to give confidence that the operator has the ability, 
commitment and resources to properly assess and effec- 
tively control risks to the health and safety of staff and the 
general public; and 


— to provide a comprehensive working document against 
S which management, and also the acceptor and HSE, can 


check that accepted risk control measures and safety 
management systems have been properly put into place 
and continue to operate in the way in which they are 
intended. 


The contents of the railway safety case are set out in Appendix 2. 
In general the risk assessment carried out will be far less 
detailed than that for a corresponding major hazard case, eg 
nuclear, offshore or CIMAH. In contrast to the Offshore Safety 
Case the use of QRA is not compulsory. All that the Regulations 
require is that the risk assessment should be ‘suitable and suffi- 
cient’, as defined in the MHSWR. For some train and station 
operations this will be a qualitative exercise based on judge- 
ment. For major hazards where the risk occurs infrequently but 
large numbers of people may be exposed or where new tech- 
nology or systems are planned then the Regulations would 
expect QRA to be used. 


4.4 Extension of the Approach to the Marine Industry 


In 1992 the Select Committee of the House of Lords published 
a report entitled Safety Aspects of Ship Design and Technology 
[Ref 20]. The report summarised the findings of an investiga- 
tion which sought to determine whether ‘the safe management 
of technology is being applied to ships to their design and 
construction, to their operation and to their maintenance and 
repair.’ 

The report was prepared against the background of a 
number of serious accidents and a growing public concern over 
maritime safety. The Committee took evidence from a wide 
range of interested parties including LR. 

The primary recommendation of the report was as follows: 


“... For the long term, we recommend a safety case regime 
for ship operations, based on primary safety goals agreed 
through IMO, administered by flag states. If necessary, the 
EC (European Community) should be prepared to impose a 
safety case regime unilaterally on ships of any flag carrying 
passengers, oil or hazardous cargoes in EC waters. [Ref 20 
Para? thee 


The report envisaged that the primary safety goals would cover 
all aspects of ship operations including standards of structural 
strength, stability, manoeuvrability, performance in a seaway, 
operational competence and safety management for every type 
of ship operation. These would be based on quantified assess- 
ment of risk, on analysis of costs and benefits and on 
international agreement as to what level of risk was acceptable. 
[Ref 20 para 11.7] 

The report envisaged that a safety case would be prepared 
for every ship trading commercially, it would be produced by 
the operator and approved and audited by the flag state. The 
safety case would demonstrate that the ship’s operations 
would achieve the primary safety goals, subject to prescribed 
conditions. These conditions would cover matters including 
maintenance, protective coatings and levels of corrosion, safety 
equipment, manning levels and crew competence, loadline and 
rates of loading and unloading, stresses on the hull, navigation 
and communications equipment and safety management 
systems. The safety case would be reviewed every five years 
in the light of changes in the ship’s operating pattern and in 
the condition of the ship. The prescribed conditions would form 
a ‘user’s manual’ for successive masters of the ship and a 
‘checklist’ for port state control. [Ref 20 para 11.7] 

The report recognised that this was a utopian goal and one 
that was impracticable as a universal regime under present 
conditions. It suggested that it would not be possible to set 


primary goals yet, because neither ship behaviour nor shipping 
risks can be fully analysed, the costs and benefits cannot be 
quantified and even if they could it would be impossible to give 
them values which would command international agreement. 
Further that ship designers and operators ‘brought up in the 
inherited framework of prescriptive rules’ would have the 
greatest difficulty in producing an adequate safety case. Most 
importantly the recognition that many flag states cannot even 
adequately administer the existing prescriptive standards for 
the limited range of matters currently covered by IMO conven- 
tions. A safety case regime would widen the gap between the 
best and the worst. [Ref 20 para 11.9] 

The report considered that most serious obstacle to univer- 
sal adoption of the safety case is in the area of enforcement. At 
present ships which satisfy their flag state but fail to meet inter- 
national prescriptive standards may be picked up by port state 
control. Under a safety case regime port state control could only 
bite on the prescriptive conditions attached to the safety case 
and approved by the flag state. These would vary from flag 
state to flag state and from ship to ship. If the flag state approved 
an inadequate set of conditions, the port state could do nothing 
about it. Under present conditions therefore a move towards a 
universal safety case regime would undermine port state 
control and encourage greater moves towards flags of conve- 
nience. 

The primary recommendation was supported by a number 
of short term and more achievable recommendations which 
would contribute towards this ultimate goal, including: 


“... that the UK delegation at IMO should advocate the adop- 
tion of performance standards rather than prescriptive 
standards wherever possible, and that prescriptive standards 
should be derived explicitly from an agreed level of desired 
performance [Ref 20 para 12.2 iv] ...” 


The report concluded that there were three conditions which 
would need to be satisfied for there to be any chance of devel- 
oping a safety case regime for international shipping. First there 
would have to be progress in ship science and maritime risk 
analysis. Secondly a ‘safety culture ‘ would have to emerge 
across the whole of the shipping industry and thirdly there 
would have to be high and uniform standards of flag state 
control. 

The UK government responded to the report agreeing that 
the concept was an ideal to be worked towards but recognising 
that it was not a practicable solution at present. The problem 
of first securing agreement at IMO as to what would constitute 
the scope of a safety case and then ensuring uniform imple- 
mentation across all flag states was recognised. Whilst the 
former could be achieved the latter is probably insurmountable 
in the foreseeable future. The UK recognised however that a 
number of elements of the safety case approach were being 
progressed, such as the introduction of the International Safety 
Management (ISM) Code and a move towards greater use of 
performance based regulations both at IMO and in Classifica- 
tion Society Rules. 

The UK submitted a paper to IMO Maritime Safety Commit- 
tee drawing on the conclusions of the House of Lords Report 
encouraging the application of the safety case approach to the 
work of IMO and to shipping. In order to distinguish the 
approach as applied to ships from that elsewhere the paper 
used the term Formal Safety Assessment. This was seen as 
comprising: 


1. The identification of hazards; 
2. | The assessment of risks associated with those hazards; 


3. Ways of managing the risks identified; 


4. Cost benefit assessment of the options identified in 3; 


5. Decisions on which options to select. 


This is broadly analogous to the process as outlined above in 
section 3 of this paper. The subject is currently being debated 
by a correspondence group at IMO. 

Following the grounding of the ‘Braer’, Lord Donaldson 
chaired an Inquiry into the prevention of pollution from 
merchant shipping. In his report ‘Safer Ships, Cleaner Seas’ 
[Ref 21], Lord Donaldson commented that a safety case 
approach would provide a forward rather than backward look- 
ing approach to safety regulation but acknowledged that it 
presented formidable difficulties. The report supported the 
current initiative by the UK Government to support the adop- 
tion of Formal Safety Assessment through IMO, 

The difficulties associated with trying to implement a regu- 
latory regime based on a unified safety case approach for all 
ships means this may never come about. Notwithstanding this 
it is clear that elements of the approach are already being 
adopted and a number of owners are developing their own 
safety cases because they have recognised the benefits that a 
risk based approach can bring. Foremost amongst these is the 
discipline of considering the safety of a ship asa single complete 
operational unit. It therefore provides a link between design 
and operations and is a mechanism for safety issues identified 
in design which can only be addressed by operational proce- 
dures to be followed through. A risk based approach also 
allows prioritisation of expenditure on improving safety to be 
directed at the areas of highest risk and for these to be consid- 
ered alongside environmental protection and business risks. It 
further provides a means of demonstrating to a third party that 
the operator has taken all reasonable steps to ensure the safety 
of the operation and that it has been considered as a whole 
rather than in a series of compartmentalised ways. 

A safety case for a ship would therefore be expected to 
include: 


- a statement of criteria for safety and environmental 
protection, 


- a demonstration that hazards have been identified and 
the risks from them reduced to as low as reasonably prac- 
ticable (ALARP), 


— details of the system in place to manage the hazards and 
associated risks and the arrangements for auditing of that 
system. 


The risk assessment and demonstration of ALARP would rely 
to a large extent on compliance with existing Class and Statu- 
tory requirements. However there should be scope for 
consideration of alternative solutions in the event that these 
requirements were deemed to be inappropriate. The safety 
management system would be expected to comply with the 
ISM Code but the content of the procedures should be linked 
closely with the risk assessment. 


5. CONCLUSIONS 


It is widely recognised that the safety of a complex modern 
plant is a function of a combination of hardware, software, 
organisational and human issues. Inquiry reports from major 
accidents that have occurred in recent years have shown the 
importance of dealing with these issues in an integrated way 
especially the need to put in place management systems which 
are designed to manage safety throughout the project life cycle. 
It has been repeatedly demonstrated that a piecemeal approach 
to the regulation of safety with split responsibilities between 
regulators does not produce the best solution for achieving a 
safe operation. 

Statutory regulation for safety in the UK has changed over 
the last twenty years from a mass of prescriptive regulation to 
goal setting regulations based on performance criteria. These 
set out what has to be achieved rather than precisely how it will 
be achieved. Demonstration of compliance with goal setting 
regulations places a much greater burden of proof on the oper- 
ator as he has to put forward a reasoned argument as to why 
his proposal meets the intent of the regulation. In many cases 
he will need to resort to risk assessment in order to prove his 
argument. 

Risk assessment is now an accepted discipline in the demon- 
stration of safety. A requirement for its use is now included in 
regulations which address the management of safety of all 
industrial concerns. It is an approach which can bring benefits 
when used in a simple qualitative way or when it is used for 
more complex situations in a quantitative way. From early days 
in which data was scarce the quantitative techniques have now 
become widely adopted and form the basis for decision making 
inmany industries. Fault frequency or failure data is stilla prob- 
lem for the risk analyst, particularly in industries where there 
has not been a disciplined effort to collect it over a number of 
years. Although generic data is available, including that for 
human reliability, there is no substitute for specific data from 
the operation in question. 

The concept of a safety case has been developed as an inte- 
grated document bringing together an analysis of the risks 
facing an installation and a description of the ways in which 
the operator will manage those risks. The risks arise from all 
sorts of causes including both internal and external hazards. 

The safety case is the operator’s document that he prepares, 
to satisfy himself and the regulator that the operation is safe. 
Itis a living document which stays with the operation through- 
out its life and is regularly updated. The operator is required 
to submit the case to the regulator who is required in most cases 
to accept it. The operator is then bound by law to comply with 
the accepted safety case, which he has written himself. 

Safety Cases are now required by law in the UK’s nuclear, 
industrial major hazard, offshore and railway industries. The 
principles are also adopted in the aircraft industry and are find- 
ing increasing application in safety critical system applications. 
European Directives on health and safety have adopted the risk 
based approach, largely following the lead set by the UK’s HSE. 

The marine industry is also considering moves towards a 
more risk based approach to safety with the IMO and IACS 
considering Formal Safety Assessment. The introduction of a 
safety case for all ships is not a practicable proposition in the 
foreseeable future principally because of the difficulty of 
getting uniformity of implementation and regulatory control. 
Nevertheless a number of owners are starting to prepare safety 
cases for their own use and as a way of demonstrating to the 
public that they have taken all reasonable steps to manage the 
safety of their operation. 

Several of the building blocks for a risk based approach to 
safety for ships have been put in place, notably the implemen- 
tation of the IMO ISM Code which specifically addresses safety 
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management. There are also moves both within Class Rules and 
at IMO to move towards more goal setting regulations where 
these are appropriate. However it would be quite wrong to 
discard the enormous body of knowledge and experience 
encapsulated in the more traditional prescriptive regulations 
and there is no doubt that, with some flexibility to allow for 
more performance based requirements to be incorporated, 
these will continue to be the basis for practical design and 
survey work. Such requirements expressed in rules, codes and 
standards are not in conflict with the safety case or risk based 
approach. On the contrary, they provide a valuable basis on 
which judgements can be formed as to the adequacy of the 
assumptions made in the safety case regarding integrity. 
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APPENDIX 1 
EXAMPLE OFFSHORE SAFETY CASE 
SCHEDULES 


This appendix contains extracts from the Offshore (Safety Case) 
Regulations 1992: SI2885 [Ref. 15]. These extracts describe the 
particulars to be included for: 


design safety case for a fixed installation, 
(Schedule 1), 


operational safety case for a fixed installation, 
(Schedule 2), 


vessel specific safety case for a mobile installation, 
(Schedule 3), 


safety management section for all safety cases, 
(Regulation 8). 


SCHEDULE 1 
Particulars to be included in a safety case for the design of 
a fixed installation 


N 


“I 


The name and address of the operator of the installation. 


A general description of the means by which the manage- 
ment system of the operator, referred to in regulation 8, 
will ensure that the structure and plant of the installation 
will be designed, selected, constructed and commis- 
sioned in a way which will reduce risks to health and 
safety to the lowest level that is reasonably practicable. 


A description, with scale diagrams, of: 

(a) the main and secondary structure of the installation; 
(b) its plant; 

(c) the layout and configuration of its plant; 


(d) the connections to be made to any pipe-line or instal- 
lation; and 


(e) any wells to be connected to the installation. 


A scale plan of the intended location of the installation 
and of anything to be connected to it, and particulars of: 


(a) the meteorological and oceanographic conditions to 
which the installation may be foreseeably be 
subjected; and 


(b) the properties of the sea-bed and subsoil at its loca- 
tion. 


Particulars of the types of operation, and activities in 
connection with an operation, which the installation is to 
be capable of performing. 


The maximum number of persons: 
(a) expected to be on the installation at any time; and 
(b) for whom accommodation is to be provided. 


Particulars of the plant and arrangements for the control 
of the operations on a well, including those: 


(a) to control the pressure in a well; 


(b) to prevent the uncontrolled release of hazardous 
substances; and 


(c) to minimise the effects of damage to subsea equip- 
ment by drilling equipment. 
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10. 


Ae 


13: 


A description of any pipe-line with the potential to cause 
a major accident, including: 


(a) the fluid which it conveys; 
(b) its dimensions and layout; 


(c) its contained volume at declared maximum allow- 
able operating pressure; and 


(d) any apparatus and works intended to secure safety. 
Particulars of plant and arrangements for: 


(a) the detection of the presence of toxic or flammable 
gas; 


(b) the detection, prevention or mitigation of fires. 


A description of the arrangements to be made for protect- 
ing persons on the installation from hazards of explosion, 
fire, heat, smoke, toxic gas or fumes during any period 
while they may need to remain on the installation follow- 
ing an incident which is beyond immediate control and 
for enabling such persons to be evacuated from the instal- 
lation where necessary, including the provision for: 


(a) temporary refuge; 


(b) routes from locations where persons may be present 
to temporary refuge and for egress therefrom to 
points from where the installation may be evacuated; 


(c) means of evacuation at those points; and 


(d) facilities within temporary refuge for the monitoring 
and control for the incident and for organising evac- 
uation. 


A statement of performance standards which have been 
established in relation to the arrangements referred to in 
paragraph 10 (including performance standards which 
have been established for structures and plant provided 
pursuant to such arrangements), and a statement of the 
minimum period for which the arrangements as a whole 
are intended to be effective following an incident referred 
to in that paragraph. 


A demonstration, by reference to the results of suitable 
and sufficient quantitative risk assessment, that the 
measures taken or to be taken in relation to the hazards 
referred to in paragraph 10, including the arrangements 
mentioned in that paragraph, will reduce risks to the 
health and safety of persons to the lowest level that is 
reasonably practicable. 


Particulars of the intended methods of design and 
construction, and of the principal codes of practice to be 
observed in relation to them. 


A description of: 


(a) the principal features of the design of the installation, 
and the arrangements and procedures for its comple- 
tion; and 


(b) the arrangements and procedures for the construc- 
tion and commissioning of the installation, which are 
intended to ensure that risks from a major accident 
will be at the lowest level that is reasonably practi- 
cable. 


SCHEDULE 2 
Particulars to be included in a safety case for the operation 
of a fixed installation 


to temporary refuge and for egress therefrom to pints 
from where the installation may be evacuated; 


The name and address of the operator of the installation. 


A description, with scale diagrams, of: 


(c) means of evacuation at those points; 


facilities within temporary refuge for the monitoring 
and control of the incident and for organising evac- 
uation. 


(a) the main and secondary structure of the installation 10. A statement of performance standards which have been 
and its materials; established in relation to the arrangements referred to in 
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14. Particulars concerning any remedial work to be carried 


(b) for whom accommodation is to be provided. 


Particulars of the plant and arrangements for the control 
of the operations on a well, including those: 


(a) 
(b) 


to control the pressure in a well; 


to prevent the uncontrolled release of hazardous 
substances; and 


(c) to minimise the effects of damage to subsea equip- 
ment by drilling equipment. 


A description of any pipe-line with the potential to cause 
a major accident, including: 


(a) the fluid which it conveys; 
(b) 


(c) its contained volume at declared maximum allow- 
able operating pressure; and 


its dimensions and layout; 


(d) 


Particulars of plant and arrangements for: 


any apparatus and works intended to secure safety. 


(a) the detection of the presence of toxic or flammable 
gas; 


(b) the detection, prevention or mitigation of fires. 


A description of the arrangements made or to be made 
for protecting persons on the installation from hazards of 
explosion, fire, heat, smoke, toxic gas or fumes during any 
period while they may need to remain on the installation 
following an incident which is beyond immediate control 
and for enabling such persons to be evacuated from the 
installation where necessary, including the provision for: 


(a) temporary refuge; 


(b) routes from locations where persons may be present 
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out to the installation or the plant referred to in the preced- 
ing paragraphs, and the time by which it will be done. 


SCHEDULE 3 
Particulars to be included in a safety case for a mobile 
installation 


N 


vi 


The name of the owner of the installation. 
A description, with scale diagrams, of: 


(a) the main and secondary structure of the installation 
and its materials; 


(b) its plant; and 
(c) the layout and configuration of its plant. 


Particulars of the types of operation, and activities in 
connection with an operation, which the installation is 
capable of performing. 


The maximum number of persons: 
(a) expected to be on the installation at any time; and 
(b) for whom accommodation is to be provided. 


Particulars of the plant and arrangements for the control 
of the operations on a well, including those: 


(a) to control the pressure in a well; 


(b) to prevent the uncontrolled release of hazardous 
substances; and 


(c) to minimise the effects of damage to subsea equip- 
ment by drilling equipment. 


Particulars of plant and arrangements for: 
(a) the detection of the presence of toxic or flammable gas; 
(b) the detection, prevention or mitigation of fires. 


A description of the arrangements made or to be made 
for protecting persons on the installation from hazards of 
explosion, fire, heat, smoke, toxic gas or fumes during any 
period while they may need to remain on the installation 
following an incident which is beyond immediate control 
and for enabling such persons to be evacuated from the 
installation where necessary, including the provision for: 


(a) temporary refuge; 


(b) routes from locations where persons may be present 
to temporary refuge and for egress therefrom to 
points from where the installation may be evacuated; 


(c) means of evacuation at those points; 


(d) facilities within temporary refuge for the monitoring 
and control of the incident and for organising evac- 
uation. 


A statement of performance standards which have been 
established in relation to the arrangements referred to in 
paragraph 7 (including performance standards which 
have been established for structures and plant provided 
pursuant to such arrangements), and a statement of the 
minimum period for which the arrangements as a whole 
are intended to be effective following an incident referred 
to in that paragraph. 


A demonstration, by reference to the results of suitable 
and sufficient quantitative risk assessment, that the 
measures taken or to be taken in relation to the hazards 
referred to in paragraph 7, including the arrangements 
mentioned in that paragraph, will reduce risks to the 
health and safety of persons to the lowest level that is 
reasonably practicable. 


10. 
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12. 


past 


Particulars of the main requirements in the specification 
for the design of the installation and its plant, including 
any limits for safe operation and use specified therein. 


Particulars of: 


(a) the limits of the environmental conditions beyond 
which the installation cannot safely be stationed or 
operated; 


(b) the properties of the sea bed and subsoil which are 
necessary for the safe stationing and operation of the 
installation; and 


(c) the locations in which the installation may be 
stationed and operated safely. 


Sufficient particulars to demonstrate that the design of 
the installation and its plant is such that the risks from a 
major accident are at the lowest level that is reasonably 
practicable. 


Particulars concerning any remedial work to be carried 
out to the installation or the plant referred to in the preced- 
ing paragraphs, and the time by which it will be done. 


REGULATION 8 
Management of health and safety and control of major acci- 
dent hazards 


(1) 


(2) 


(4) 


An operator or owner who prepares a safety case 
pursuant to these Regulations (in this regulation referred 
to as ‘the duty holder’) shall, subject to paragraphs (2) 
and (3), include in the safety case sufficient particulars to 
demonstrate that: 


(a) his management system is adequate to ensure that 
the relevant statutory provisions will (in respect of 
matters within his control) be complied with in rela- 
tion to the installation and any activity on or in 
connection with it; 


(b) he has established adequate arrangements for audit 
and for the making of reports thereof; 


(c) all hazards with the potential to cause a major acci- 
dent have been identified; and 


(d) risks have been evaluated and measures have been, 
or will be, taken to reduce the risks to persons 
affected by those hazards to the lowest level that is 
reasonably practicable. 


Paragraph (1) shall only require the particulars in the 
safety case to demonstrate the matters referred to in that 
paragraph to the extent that it is reasonable to expect the 
duty holder to address them at the time of sending the 
safety case to the Executive. 


Without prejudice to paragraphs 2 and 3 of Schedule 4, 
this regulation shall not apply to a safety case prepared 
pursuant to regulation 6(2). 


In this regulation: 


(a) ‘audit’ means systematic assessment of the adequacy 
of the management system to achieve the purpose 
referred to in paragraph (1) (a) carried out by persons 
who are sufficiently independent of the system (but 
who may be employed by the duty holder) to ensure 
that such assessment is objective; 


(b) ‘management system’ means the organisation and 
arrangements established by the duty holder for 
managing his undertaking. 
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APPENDIX 2 
RAILWAY SAFETY CASE SCHEDULE 


This appendix contains an extract from the Railway (Safety 
Case) Regulations 1994 [Ref. 19] setting out the details of infor- 
mation to be included in a safety case. 


SCHEDULE 1 
Particulars to be included in a safety case 


1. 


N 


10. 


The name and address of the person who has prepared 
the safety case (in this Schedule referred to as “the duty 
holder”). 


A description of the operation intended to be undertaken 
by the duty holder. 


A general description of the premises or plant intended 
to be used by the duty holder for the operation intended 
to be undertaken by him. 


Particulars of any: 
(a) technical specifications; and 


(b) procedures or arrangements relating to operations or 
maintenance, which the duty holder intends to 
follow in connection with the operation intended to 
be undertaken by him, insofar as they affect the 
health and safety of persons. 


A statement of the duty holder’s general policy with 
respect to the health and safety of persons affected by 
the operation he intends to undertake, including the 
health and safety objectives he intends to achieve in rela- 
tion to it. 


A statement of the significant findings of the risk assess- 
ment the duty holder has made pursuant to regulation 3 
of the Management of Health and Safety at Work Regu- 
lations 1992 (SI 1992/2051) and particulars of the 
arrangements he has made pursuant to regulation 4(1) 
thereof. 


Particulars to demonstrate that the management system 
of the duty holder is adequate to ensure that the relevant 
statutory provisions will (in respect of matters within his 
control) be complied with in relation to the operation he 
intends to undertake. 


Particulars to demonstrate that the duty holder has an 
adequate organisation for carrying out the policy referred 
to in paragraph 5 and adequate arrangements for ensur- 
ing the competence of his employees as respects health 
and safety. 


Particulars to demonstrate that the duty holder has estab- 
lished adequate arrangements for the passing of 
information relevant to health and safety to persons 
within his undertaking and to other railway operators 
whose operations affect or are affected by the operation 
intended to be carried out by the duty holder. 


Particulars of the arrangements the duty holder has estab- 
lished for consulting his employees on matters of health 
and safety. 


Particulars to demonstrate that the duty holder has estab- 
lished adequate arrangements for investigating accidents 
and other incidents which could endanger persons, for co- 
ordinating such investigations with the investigations 
carried out by other railway operators and for participating 
in investigations carried out by other railway operators. 


14. 


16. 


WE 


18. 


Particulars of the arrangements the duty holder has estab- 
lished with a view to securing the health and safety of 
persons, for managing work carried out by persons who 
are not his employees on or in relation to premises or plant 
which he owns or controls. 


Particulars of the procedures the duty holder has estab- 
lished for dealing with accidents and with emergencies 
or other incidents which could endanger persons. 


Where the safety case is prepared pursuant to regula- 
tion 5, particulars of the procedures and arrangements the 
duty holder has established: 


(a) to prevent risks to the health and safety of persons 
arising from the movement or overcrowding of 
persons in the station; and 


(b) for the evacuation of persons from the station in an 
emergency. 


Particulars of the safety procedures the duty holder has 
established for the design and procurement of premises 
and plant to be used by him or under his control 


Particulars to demonstrate that the duty holder has estab- 
lished adequate arrangements for audit and the making 
of reports thereof. 


Particulars of the arrangements the duty holder has estab- 
lished to enable him to comply with regulation 8, 
including: 


(a) inacase where the duty holder is to submit the safety 
case to an infrastructure controller for acceptance 
pursuant to these Regulations, particulars to demon- 
strate that the duty holder has established adequate 
arrangements for enabling the controller to follow 
with respect to that safety case the arrangements 
described in his own safety case pursuant to para- 
graph 3 of Schedule 2; 


(b) ina case where the duty holder is to submit a safety 
case to the Executive for acceptance pursuant to regu- 
lation 5, particulars to demonstrate that the duty 
infrastructure controller referred to in that regulation 
to follow with respect to that safety case the arrange- 
mex.s described in his own safety case pursuant to 
paragraph 4 of Schedule 2. 


In this Schedule: 


(a) “audit” means systematic assessment of the 
adequacy of the management system to achieve the 
purpose referred to in paragraph 7 carried out by 
persons who are sufficiently independent of the 
system (but who may be employed by the duty 
holder) to ensure that such assessment is objective; 


(b) “management system” means the organisation and 
arrangements established by the duty holder for 
managing his undertaking; 


(c) any reference to an operation intended to be under- 
taken by a duty holder is: 


(i) where the safety case is prepared pursuant to 
regulation 3, a reference to the operations he 
intends to carry out in relation to the railway 
infrastructure concerned; 


(ii) where the safety case is prepared pursuant to 
regulation 4 or 5, a reference to the train or 
station operations concerned. 
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Discussion on the Paper 


THE SAFETY CASE 


by 


J. T. Stansfeld 


DISCUSSION 
From Mr D.T. Boltwood 


Firstly, | should like to thank Mr Stansfeld for an extremely 
interesting paper and an excellent presentation. 


I should like to raise three points: 

(a) It seems to me that one of the most important questions 
emerging from the presentation relates to how prescriptive 
rules can exist within a Safety Case regime. Clearly, this 
point is particularly relevant to Lloyd’s Register since it 
publishes Rules generally of a prescriptive nature and all 
ships classed with Lloyd’s Register need to comply with 
them. Since the Safety Case reflects a “goal setting” 
philosophy and Lloyd’s Ship Rules are based mainly on 
evolved experience with some provision for direct 
calculations, does the author expect that their format, 
presentation and development will need to change 
radically? 


(b) In his presentation the author made the point of stressing 
that the advantage of the Safety Case over prescriptive 
Rules was that the Safety Case addressed the “totality of 
safety” and was holistic in nature. Addressing the “totality 
of safety” therefore means covering a wide range of 
“operational aspects” of ship safety involving the human 
element, an area of safety which traditionally Lloyd’s 
Register has not become involved in, believing this to be a 
matter for the Flag Administrations and the owners. In 
principle, Classification is concerned with the hull and 
essential on board machinery systems and, therefore, 
moving into the area of “operational” matters would be a 
change for Lloyd’s Register and I should appreciate the 
author’s views on this matter. 


(c) Given that several Safety Cases may be presented for a 
number of ships or fleets in different regions and 
enyironments, can the author explain how these Safety 
Cases will interface and interact with one another in order 
that emergencies can be adequately planned? If there is no 
interaction, is this an inherent weakness in the concept of 
the “totality of safety” ? 


To Mr D. T. Boltwood 


(a)In a Safety Case regime the onus is on the owner or 
operator to make a ‘case for safety’ to the regulator for his 
operation, however that is defined. In doing so he will need 
to argue that design issues have been properly addressed. To 
do this he may wish to rely on established rules and 
standards in demonstrating that the installation has been 
designed and constructed in accordance with best practice. 
Thus prescriptive rules have a role to play, especially in the 
detail of the design. The use of such rules is entirely 
consistent with a risk based approach since they encapsulate 


the results of experience and historical data is always a 
starting point for an assessment of risk. However, to counter 
the criticisms that have been made of prescriptive rules two 
issues need to be addressed. First, such rules need to be 
transparent - that is the user needs to be able to understand 
what assumptions have been made in their derivation, and 
secondly the regime in which the prescriptive rules exist 
should state the desired goals and allow for an alternative 
demonstration of an equivalent level of safety. The LR Rules, 
of necessity, contain a mixture of prescriptive and goal setting 
approaches. I believe that as they evolve, they should be 
made more transparent, and where it is possible greater 
flexibility should be allowed in demonstrating compliance. 
However, the practical difficulties associated with this, 
outlined in Section 3 of the Paper, should not be overlooked. 


(b)The presentation and the Paper were not intended to 
suggest that the Rules could, or should in some way, be 
replaced by a Safety Case regime. Rather that the Rules can 
play a valid part in making the case for safety, but it is only a 
part. The discipline of preparing a Safety Case is that it forces 
the owner or operator to consider all the aspects of his 
operation, both internal and external, which have a bearing 
on safety. To do this he needs to consider what the hazards of 
his operation are, how significant they are, what the 
consequences of their realisation are, and then what steps he 
needs to take in order to deal with them. In his case for safety 
the operator needs to be able to set out how each significant 
hazard is being addressed, whether through design, 
protective systems, or operational procedures. Only the first 
two are amenable to treatment by rules, the latter can be 
addressed in the Safety Management System. Clearly 
operational issues have a bearing on design and vice versa 
and hence should be considered together in arriving at the 
most cost effective approach to safety. 

The current marine safety regime is fragmented. If a 
Safety Case approach were to be developed significant 
changes in the roles of flag states and class societies would 
take place. Whichever body had the responsibility for 
accepting an operator’s Safety Case would clearly have to 
make a judgement about the adequacy of the Safety 
Management System which deals directly with operational 
issues. The purpose of the paper was to show how the Safety 
Case approach can provide a means for the operator to 
consider safety in a unified way. 


(c)I should re-emphasise that I do not see Safety Cases 
becoming a universal requirement for ships. However, there 
are certain vessel types for which it could be argued that the 
introduction of a Safety Case could bring benefits. The 
emergency plans within the vessel Safety Case would then 
identify the external inputs required from onshore services 
when in port or coastal waters and would identify whose 
responsibility it would be to co-ordinate their provision. In 
such a situation the vessel would be on a dedicated route, e.g. 
ferry services. It is likely that for hazardous cargoes, or 
perhaps large passenger numbers the port authorities or 


terminal operators would have Safety Cases which would 
also identify requirements for visiting vessels. These would 
obviously need to be co-ordinated. If there is no interaction 
then obviously safety is compromised as the Safety Case 
would need to cover all phases of the vessel's operation. 


From Mr W.R. Totterdell 


Everyone involved in the offshore industry must be aware 
of Safety Case requirements. The production of this paper is 
very timely. Part of the industry is now moving into a new 
phase concerning preparation for the abandonment of 
platforms. Where does the Safety Case end? Is a Safety Case 
required during abandonment, as long as personnel are 
working on the platform, etc.? 


To Mr W.R. Totterdell 


The intention is that the Offshore Safety Case regime will 
deal with all phases of the life of an installation from 
concept, through design, construction, installation, 
operation and maintenance to abandonment. In the case of 
abandonment the Guidance to the Offshore Safety Case 
Regulations envisages three stages: interim 
decommissioning, in which production ceases; total 
decommissioning after a decision has been made _ to 
abandon the platform; and physical removal of the 
structure. The first stage will be dealt with by a revision to 
the operational Safety Case whilst the second and _ third 
stages will require an abandonment Safety Case to be 
prepared. This is because the hazards, the operations taking 
place and the Safety Management Systems will all change. If 
removal of the platform is to be delayed then the operator 
will need to demonstrate what maintenance programme has 
been put in place to ensure that the safety of personnel will 
not be compromised. In the abandonment case the operator 
will need to address: 


(i) procedures for cutting of the structure, 

(ii) what safeguards are in place to prevent structural 
collapse, 

(iii) what the hazards are associated with failure of the 
cutting operation which may have the potential for 
leaving a dangerous installation, 

(v) the downhole condition of abandoned wells, 

(vi) the use of explosives and the hazards they constitute to 
others. 


From Mr D.]. Rule 


I should like to thank Mr Stansfeld for an interesting paper 
and excellent presentation. 

My first question concerns the role of the regulator. How 
does a statutory or other body responsible for the 
acceptance of a Safety Case ensure consistency when 
determining whether risks have been reduced so as to be as 
low as reasonably practical. Does this not require the 
setting, even tacitly, of target levels of risk, despite the 
difficulties and disadvantages of so doing which are 
mentioned in the paper and emphasised during the verbal 
presentation ? 

My second question, or rather request, is to ask the 
author to elaborate on the impact he would envisage that a 
move towards formal safety assessment in the shipping 
industry would have on LR operations. 


tN 


Finally, a comment. There has been considerable 
discussion on the advantages and disadvantages of 
‘prescriptive’ as opposed to ‘goal oriented’ regulations and 
it appears to be implied that the Classification Rules fall 
firmly in the former. This is, however, not always the case. 
For many years the Classification Rules have been provided 
for the acceptance of alternative arrangements where these 
can be demonstrated to be equivalent to those envisaged by 
the Rules. At least, in so far as hull structures are concerned, 
many of the rule requirements seek to relate demand, in the 
form of algorithms for design loading, to capability, as a 
function of geometric and material properties, by means of 
a goal in the form of a permissible stress or factor of safety 
against buckling. 


To Mr D.J. Rule 


The establishment, albeit tacitly, of what may be considered 
as acceptable levels of risk will inevitably take place in the 
regulatory body in ensuring consistency within an industry 
and, to a lesser extent, between industries. The important 
issue however, is that such target levels should not be set as 
absolute levels, but should be treated as a guide, since risk 
assessment is not an absolute science. Rather it allows for a 
comparison between known and accepted levels of risk and 
the risk estimated for the operation in question, or between 
the levels of risk estimated for alternative solutions. This 
comparison is then used in making decisions in the cost 
benefit analysis required to demonstrate ALARP. Clearly an 
assessment which showed a higher level of risk than that 
which is currently experienced would indicate that safety 
was being compromised and would need to be carefully 
scrutinised. The current level of risk can usually be 
estimated from the number of incidents versus the number 
of individuals exposed to the hazard. A very good 
treatment of risk may be found in Reference [7] listed in 
Section 7 of the Paper. 

As I stated in the Paper, I do not believe we will see 
Safety Cases in their current form required universally for 
ships. However, I do believe that there will be pressure on 
the industry to take a more risk based approach to safety. 
Part of this will, I believe, come from the industry itself as a 
holistic approach to managing risk makes good business 
sense. In this environment I believe that Class and Statutory 
Rule making bodies have to be able to accept solutions 
which comply with the spirit of the Rules, if not the letter, 
provided an equivalent or better level of safety can be 
demonstrated and is achieved. Improving the transparency 
of the Rules and including statements of goals at a realistic 
level, as mentioned in my reply to Mr Boltwood, will be an 
important pre-requisite to this. In achieving these aims 
Surveyors will require guidance in the use of risk 
assessment techniques and practice and an introduction to 
the subject has been part of the Induction Courses for a 
number of years. Over reliance on prescriptive rules 
without good reason is just as bad for the regulator as it is 
for the designer. The opportunity to exercise judgement, as 
demanded by formal safety assessment, also makes for a 
more interesting career. 

LR is also involved in auditing Safety Management 
Systems in accordance with the ISM Code. This is dealing 
directly with the management of safety on a day to day 
basis and although strenuous efforts are made to avoid 
getting involved with the content of the procedures 
themselves as far as they address safety, I believe it is 
inevitable that LR will become more involved in operational 
issues if formal safety assessment is adopted. Thus the audit 


of the Safety Management System may also, in time, 
encompass technical issues. 

In the Paper I stressed that LR’s Rules are a mixture of 
goal setting and prescriptive requirements. This is essential 
as some topics can be only be practically addressed by a 
prescriptive rule and some are best dealt with using the goal 
setting approach. I have no argument with the example set 
out by Mr Rule, provided its implementation is clear to a 


user of the Rules. 


From Mr R.A. Cooper 


I found Mr Stansfeld’s paper of great interest which I read 
from the perspective of LR’s role in applying statutory 
requirements for ships on behalf of Flag Administrations. In 
this respect, LR applies the requirements laid down in the 
SOLAS Convention. 

Most flag states condone departures from the intent of 
SOLAS in the form of exemption certificates issued either 
by themselves or requiring LR to do so. Even IMO permits 
so called “equivalent arrangement” variations to SOLAS. 
The basis of these exemptions/arrangements are, almost 
invariably, no more than to facilitate lower costs to the ship 
owner. 

In processing ships’ statutory documentation, LR steers a 
course between the requirements of our shipowner client, 
our administration client and the intent of SOLAS. In doing 
so, | sometimes think LR is more concerned with protecting 
its own position by having the appropriate paperwork to 
hand rather than the intent of the SOLAS Convention and 
safety of life. 

I should be interested in Mr Stansfeld’s view of 
reconciling the wishes of administration and shipowner on 
the one hand, and that of applying the intent of SOLAS on 
the other; bearing in mind that in so doing our clients are 
free to switch to another Classification Society so losing LR 
revenue and, assuming that that Society is more 
accommodating to the clients’ wishes, not advancing the 

case for safety one iota. 


To Mr R.A. Cooper 


I can see no objection to achieving a solution which results 
in a lower cost to the shipowner provided an equivalent or 
better level of safety is achieved to that required by the 
Rules or Convention. This, surely, is a ‘win - win’ situation. 
The difficulty, of course, is demonstrating that this has been 
achieved. In some cases it will be obvious, in others 
considerable analysis may be required and it may be 
simpler to comply. 

When acting on behalf of an administration, LR must be 
able to demonstrate that it has properly implemented the 
statutory requirements which have been delegated. In the 
event of an enquiry or audit, a proper audit trail has to be 
present so that the decision making process can be clear and 
easily followed. Such is the nature of achieving quality in 
our activities. In the context of the Safety Case transparency 
of decisions is important in allowing others to understand 
how safety is being managed. 

Mr Cooper has touched on the challenge faced by LR 
Surveyors daily whether in HQ or in the field. How do we 
ensure that safety standards are maintained whether for 
Class or Statutory requirements whilst taking a practical 
view as to what is possible and achievable? With the [ACS 
agreement on Transfer of Class in place the scope for an 
owner to switch because he wishes to evade requirements 


placed on him by one class society or another is greatly 
reduced. If an owner wishes to transfer from LR for these 
reasons then it is probably not much of a loss to LR. Safety 
overall in the industry will be improved by encouraging the 
best and helping demonstrate that good safety is good 
business, rather than by coming down to the level of the 
lowest. 


From Mr P.W. Harvey 


I would like to congratulate the speaker on his clear 
presentation of a wide ranging subject. You have briefly 
mentioned the Safety Management System as part of the 
Safety Case. What is the role of a safety specific 
management system as distinct from an ISO 9000 based 
system within the Safety Case? 


To Mr P.W. Harvey 


The Paper mentions Safety Management Systems briefly 
and these could easily be the subject of a paper in 
themselves. Quality Management Systems as defined by the 
ISO standards are typically for ensuring that a company’s 
activities, as it relates to its clients, are managed in a 
consistent way. Although the systems incorporate feedback 
mechanisms to deal with non conforming products or 
services and compliance with standards, Ale ISO 9000 
standards do not make any comment on the technical 
quality of the product or service itself. Thus whilst a 
knowledge of the industry is important to ensure the 
management system is appropriate, detailed knowledge of 
the product or service itself is not. The management system 
is thus a set of procedures for ensuring consistency. 

Many of the disciplines of a quality system will also be 
used in a specific Safety Management System, e.g. auditing, 
definition of responsibilities etc. However, since a Safety 
Management System must address the safety issues facing 
the operation, it is also directly concerned with the technical 
detail of the hazards, their consequences and the measures 
in place for dealing with them. In a Safety Case, a link will 
need to be made between the technical assessment of the 
risks and the procedures in the Safety Management System 
put in place to manage them. The technical adequacy of the 
procedures for dealing with the identified risks is therefore 
a critical aspect of a successful Safety Management System. 
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SYNOPSIS 


This paper addresses the microbial problems being faced by 
the marine industry which have reached almost epidemic 
proportions. The industry is now witnessing severe corrosion 
not only in ballast tanks and bilges, but often in other areas 
which are least expected. 

Microbial contamination is encompassing fuels, lubri- 
cants, bilge and ballast water, often causing severe damage to 
hull, machinery and equipment. Ship board contamination 
may be initiated from previously infested tanks and systems, 
or be introduced onboard through contaminated fuel or 
seawater. Poor housekeeping methods, environmental legis- 
lation and ship design are all conducive to microbial 
proliferation and its associated problems. 

Far from being an ‘act of God’, microbial damage is almost 
entirely manmade and preventable; consequently hull insur- 
ance is often refused for coastal trade and inshore work boats, 
unless appropriate anti-microbial preventative procedures 
are implemented. 

The research conducted by Fluid Analytical Consultancy 
Services (FACS), examined the ways in which microbial 
contamination can be reduced by implementing controls, 
good housekeeping and chemical biocides. To achieve this, 
new standards are suggested to monitor these measures, thus 
ensuring that the safe operation of ships is not jeopardised 
and human health is not endangered. 
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1. INTRODUCTION 


Technical operational problems in marine machinery seem to 
run in cycles; for example, high cylinder liner and piston ring 
wear in the early days of the use of residual fuel, tin corrosion 
of turbine bearings in the Sixties, and the structural problems 
affecting bulk carriers, tankers and Ro/Ro vessels. As answers 
are found, so the problems decrease and in some cases are 
never heard of again. 

Microbiological attack on distillate fuels and lubricants 
seemed to be at its height in the Seventies and early Eighties 
and a large number of ships were affected. As the marine 
industry found out more about the causes so the industry was 
able to effect remedies. Normally, once a cycle has peaked the 
problem is virtually over. To some extent this has been true 
with microbial attack on lubricants, but it has not been totally 
eradicated. While microbial problems in the marine industry 
were originally mainly confined to distillate fuels and lubri- 
cants, recently the areas of attack have spread to residual fuels, 
bilge, ballast, and potable water. 

Curious though this appears on a preliminary examina- 
tion, there are in fact several reasons for this sudden upsurge: 


1. Lower levels of shipboard manning and less experienced 
personnel have proved a fatal combination for maintain- 
ing stringent housekeeping. 

2. Adverse trading conditions have led to ships being laid up 
or in intermittent service, providing long, undisturbed 
incubation periods for opportunist microorganisms. 

3. Somewhat ironically, marine pollution legislation under 
the MARPOL 73/78 regulation which restricts the pump- 
ing of bilges, has led to water laying stagnant for longer 
periods. 

4. Environmental restrictions in the use of toxic biocidal 
chemicals within bilges and fuels, exacerbates the prob- 
lems associated with microbial contamination. 

5. Design considerations of tanks, bilges and pipe systems 
should provide effective water draining and subsequent 
treatment. 

6. Lack of knowledge of the factors which cause microbial 
contamination and accurate diagnosis of the operational 
problems being experienced. 


Consideration of these factors, as well as explaining the 
increase in corrosion problems, also identifies how strategies 
for recognition, evaluation, rectification and control of micro- 
bial infestation may be implemented. 

The intention of this paper is to introduce microbiological 
problems which Surveyors may encounter. In this respect, 
each section of the paper has been laid out for ease of reference. 
The main microbial processes are introduced in Section 2. 
These processes are related to the systems employed onboard 
ships in Section 3, and Section 4 deals with the methods 
currently applied to controlling microbial infection. The 
effects of microorganisms on human health and the potential 
casualties are discussed in Sections 5 and 6 respectively. Guid- 
ance is given for onboard identification of microbial problems 
in Section 7. Finally, the applicable standards are provided in 
Section 8. 

It is not intended that this paper provides a comparison 
of the seriousness of this form of deterioration of ships and 
their equipment with that of other corrosion deterioration 
processes. This would form the object of a future paper when 
the appropriate data is available to allow comparisons to be 
made. In this respect, it would be necessary to determine the 
cause of any corrosion deterioration of ships and their equip- 
ment. It may be that corrosion deterioration previously 
assumed to be electrochemical was in fact microbiological. 


2. MICROBES 


Whilst even the worst marine oil spills are eventually broken 
down by microorganisms, few of us appreciate that the same 
microbes are equally content onboard. 

The microbiological contamination process is a well 
known phenomenum and small populations of microorgan- 
isms exist quite naturally. These microorganisms, consisting 
of bacteria, yeasts and moulds, are easily tolerated at low 
contamination levels. It is only when their numbers are not 
controlled within their immediate environment, that they 
experience rapid growth, resulting in infestation. 

A good example is food, which when past its ‘sell by date’, 
quickly spoils as the natural resident microorganisms multi- 
ply uncontrollably, particularly under warm conditions. 

From a marine point of view there are six main areas of 
concern for microbiological infestation. These are: 


1. Distillate fuel; 

2. Lubricating oil; 

3. Cooling water; 

4. Bilge water; 

5. Ballast water; 

6. Distillate cargoes. 


Ineach case, itis to be remembered that microbes are living 
organisms and their growth depends upon the readily avail- 
ability of water, nutrients, heat, oxygen (or sometimes lack of 
it) within an otherwise acceptable environment. 


Water: The main requirement for microbial proliferation is 
water. This is indicated in the majority of fuel and lubricant 
microbial problems reported, which identified the presence 
of water within the storage and service tanks due to infrequent 
draining. In the laboratory, using selected microbes, an aque- 
ous nutrient supplement and an ideal temperature at about 
30°C, visible growth will be present within about a week. 
Although adequate water is supplied under laboratory condi- 
tions, in practice, water availability is often growth limiting. 

Whilst water dissolved in fuel appears to sustain slight 
mould growth, it is generally believed that microbes in the 
fuel phase are resident in water droplets or surrounded by a 
water sheath. 

Substantial microbial growth needs substantial free water, 
probably more than 1% - wt.content. 

It should be noted that water availability is the key factor 
and not water concentration; a solute such as glycol antifreeze 
additive which migrates from the fuel to the water, depresses 
the relative humidity (water activity) and water becomes less 
available for microbial growth. 

The same principle controls microbial spoilage of jam — 
the sugar depresses the water activity. Also, some aviation 
fuel specifications include glycol additives both to prevent 
water freezing and to suppress microbial growth. The more 
antifreeze that is present, the greater the anti-microbial effect 
and typically, 0.15% - wt.content is required in fuel specifica- 
tions. Traces of weak glycol solutions in water are growth 
stimulating, thus overdosing with glycol is preferred as a safe- 
guard against contamination. 

Modern lead-free gasolines contain water soluble 
oxygenates such as methyl and ethyl alcohol, methyl tertiary 
butyl ether and it seems likely that these are also anti-micro- 
bial, when they migrate to a water phase in sufficient 
concentration. 


Nutrients: All microorganisms require equitable conditions 


for their nourishment and growth. Hydrocarbons and chem- 
ical additives in the fuel and lubricant act as their food source, 
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coupled with those that are also available from contaminated 
water sources. It seems that whether the latter is salt or fresh 
water makes little difference to the microbes, except that the 
sulphate in seawater is readily converted to hydrogen 
sulphide by Sulphate Reducing Bacteria (SRB). Polluted 
harbour water used to wash and ballast tanks will probably 
contain nutritive organic matter and agricultural fertilisers, 
as well as fuel degrading microbes — a legacy of years of oil 
pollution. 

In cargoes, traces of previous shipments of urea, fertiliser 
and possibly sugar may add nutrients to the microbes’ diet. 
In addition, low concentrations of most biocides are growth 
promoting, not growth inhibiting. Rust and other particulates 
also seem to stimulate microbial growth. As in the cycle of life, 
dead microbes feed living ones. 

However, ideal conditions for microbial growth do not 
normally occur in practice. The relatively rapid growth which 
can be achieved in the laboratory in one week will take longer, 
probably several months, under shipboard conditions. Severe 
corrosion, if it occurs, will not appear for many weeks after 
growth has become apparent. Clean, dry, low temperature fuel 
will never permit significant growth of microorganisms. 


Temperature: Is a vital factor; warm conditions encourage 
growth, whilst extreme cold below 5°C and excessive heat 
above 70°C will inhibit the most hardened of microbes. They 
prefer a temperate climate, in the temperature range of 15°C 
to 35°C. Warm engine rooms provide ideal breeding grounds. 


Environment: Corrosive species of microbes dislike undue 
agitation, preferring the fuel and lubricant systems to lie 
dormant. Laid-up ships, or ships in intermittent service, are 
the most vulnerable to attack. Any condensation or water leak- 
age completes the required environmental conditions for 
microorganism proliferation, since they live in a water phase, 
but feed off nutrients within an oil phase. Hence, the oil/ water 
interfaces are particularly susceptible to infection. The 
unpleasant by-products of their digestion, after hydrocarbons 
have been oxidised into acids, include toxic and pungent 
hydrogen sulphide. This is produced from any sulphurous 
compounds within the fuel, lubricant, seawater or waste prod- 
uct. Microbial growth is seen as a characteristic sludge formed 
from accumulated cellular material which may restrict fuel 
and lubricant pipe lines and filters. 

Given the ideal environment, a small number of microbial 
cells can multiply to produce a few kilograms of biomass in a 
very short period. 

Microbes can flourish over a wide range of physical condi- 
tions. Some can be found growing slowly in the refrigerator, 
whilst others exist in hot springs. One group can exist at pH 1, 
while others at pH 10. It should not be inferred that any one 
species can flourish over a wide range of physical conditions, 
as each species has its own well defined set of optimal condi- 
tions. 


2.1 Types of Microbes 


Microbiological contamination and growth can have a signif- 
icant impact upon the safe and efficient operation of ships. In 
many instances, problems which were fundamentally micro- 
bial in nature have not been recognised as such, especially 
when microbial infection was only partly to blame for the 
phenomena experienced. 

There is no doubt that the marine industry continues to 
lag behind other major industries in its appreciation of the 
consequences of microbial infection, particularly those infec- 
tions which have involved distillate products. The experience 
gleamed from the detection, quantification and cure of infec- 


tion in other industries can still be applied in principle, but 
there are a variety of additional factors unique to the marine 
industry. 

In the problems of the marine industry, three basic types 
of spoilage and corrosive microorganisms are identified; 
bacteria, yeasts and moulds. 

Bacteria can be further subdivided into three main types: 


1. Aerobic Bacteria 
Require oxygen to survive. 


2. Anaerobic Bacteria 
Live in the absence of oxygen 
3. Facultative Bacteria 


Live with or without oxygen 


Bacteria: are a very diverse group of simple, single celled 
organisms with a rigid cell wall. Bacteria may be rod-like, 
spherical or spiral in shape and typically range from 1 to5 um 
in size. Many bacteria are actively mobile and can move 
througha liquid medium using a whip-like appendage or flag- 
ellum. They are able to reproduce asexually and rapidly by 
binary fission, into two cells, often with a doubling time of 
less than twenty minutes, as shown in Figure 2.1. 


Figure 2.1 Bacteria reproducing by binary fission 


This allows them to exploit any good growth conditions. 
Some types produce spores which are resistant to adverse 
conditions such as disinfectants and temperatures. They may 
grow aerobically (with oxygen) and/or anaerobically, (with- 
out oxygen) using both simple and complex nutrients. Their 
great diversity means that virtually any organic substance can 
be utilised by one or more types of bacteria, as shown in 
Figure 2.2. 


Figure 2.2 Uncontrolled bacteria proliferation 
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Although in general, they prefer neutral or slightly alka- 
line conditions, some species are very acid tolerant. Partial 
breakdown products are a common feature, being secreted 
out of the cell and such partial breakdown products serve as 
nutrients for other microbes. This leads to the rapid develop- 
ment of a consortium of species able to biodegrade the 
substrate, being interdependent upon each other for nutrients 
or environmental modification. Many types produce copious 
amounts of extra-cellular slime material, which aids their 
attachment to surfaces and also protects the colony from 
changes in the environment. In particular, slimes may deacti- 
vate, or prevent diffusion of chemical biocides into the bulk 
of the slime, thus reducing the effectiveness of this form of 
remedial treatment. Even a thin slime layer prevents diffusion 
of oxygen to the base of the slime, and this, coupled with the 
demand for oxygen by the aerobic bacteria, leads to ideal 
conditions for the growth of SRB and associated corrosion 
problems. Typical bacteria known to utilise hydrocarbons are 
Pseudomonas aeruginosa, other Pseudomonas species, Flavobac- 
terium spp., Acinetobacter spp., Alcaligenes spp., Micrococcus spp., 
Arthrobacter ssp., Corynebacterium spp., Brevibacterium spp., 
Klebsiella spp., 


Yeasts: are unicellular, being ovoid or spherical in shape and 
about 5 zm long however, some may also produce rudimen- 
tary filaments, as shown in Figure 2.3. 

They reproduce by budding on the parent cell, increasing 
in size and eventually separating. The reproduction cycle 
takes several hours to complete and they prefer slightly acidity 
conditions. Typical yeasts growing on hydrocarbons are 
Candida spp., Saccharomyces spp., Torula spp., Torulopsis spp., 
Hansenula spp. 


Figure 2.3 
Ovoid and spherical yeast insolated from 
contaminated fuel oil 


Moulds: are typically multicellular, with rigid, chitinous cell 
walls. They usually grow in the form of branched hyphae, a 
few microns in diameter, to form extensive, thick, tough, inter- 
twined mycelial mats, especially at interfaces, as shown in 
Figure 2.4. 

Growth is brought about through the simultaneous fila- 
ment lengthing and the production of branches. The 
reproduction cycle to double their size lasts only a few hours, 
unless there are problems in nutrient diffusion to the centre of 
the coherent mat, then rapid growth is confined to the periph- 
ery. Eventually, spores are produced which disperse and 
germinate to produce new growth mats, preferring slightly 
acid conditions. They produce many oxidised carbon 


Figure 2.4 
The formation of extensive, thick, tough, 
intertwined mycelial mats by stages 


compounds, especially low molecular weight compounds 
such as organic acids, which can be used by other microbes. 
Their demand for oxygen again creates ideal conditions for the 
growth of SRB. Typical moulds which degrade hydrocarbons 
are Penicillium spp., Aspergillus spp., Fusarium spp., Monilia spp., 
Botrytis spp., Cunninghamella spp., Scopulariopsis spp. 


Sulphate Reducing Bacteria (SRB): are a specific group of 
anaerobic bacteria that have special growth requirements. 
They only use simple carbon sources, not hydrocarbons, 
require the activity of other microbes in a consortium and 
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Figure 2.5 
SRB under the microscope compared to 5.1m in size 


produce hydrogen sulphide by reduction of oxidised sulphur- 
containing compounds, such as sulphate from seawater, as 
shown in Figure 2.5. 

They are involved directly with many microbial corrosion 
reactions and can cause sulphide souring of stored distillate 
products. Typical SRB are Desulfovibrio spp., Desulfotomaculum 
spp., Desulfobulbus spp. 

Overall, the microorganisms which are identified most 
often in the marine industry, are the hydrocarbon degrading 
spoilage and corrosive species, as indicated in Figure 2.6. 

The moulds tend to form a coherent mat under which 
intense corrosion can occur. Two types of moulds Cladospo- 
rium resinae, now renamed Hormoconis resinae and Aspergillus 
fumigatus which can tolerate seawater and higher tempera- 
tures, were previously known as being the most troublesome, 


Gram-negative. 
Spoilage Species. 


Bacteria (aerobic); 
Pseudomonas aeruginosa. 
Pseudomonas fluorescens 
Pseudomonas cepacia. 


Yeasts; 

Candida spp. 
Saccharomyces spp. 
Torula spp. 


Moulds; 

Cladosporium resinae/ Hormoconis resinae. 
Aspergillus fumigatus. 

Fusarium oxysporum. 


Gram-negative. 
Corrosive Species 


Bacteria (anaerobic) 
Desulfovibrio desulfuricans. 
Desulfotomaculum spp. 
Desulfobulbus spp. 


Gram-positive. 
These microorganisms are not normally the cause of problems 
in the marine industry. 


Figure 2.6 Spoilage and corrosive species 


Figure 2.7 
Cladosporium resinae mould taken from 
contaminated fuel oil 


Figure 2.8 
Filter debris, showing rod-shaped bacteria, 
branched moulds, fungi and yeasts 


as shown in Figure 2.7. Today, responsibility is shared between 
a very broad spectrum of bacteria, yeasts and moulds, as 
shown in Figure 2.8. 

The aerobic bacteria Pseudomonas spp. have the ability to 
utilise a wide range of substrates for their growth and can 
cause considerable surfactancy problems, in the presence of 
dissolved oxygen. Only a few ppm of dissolved oxygen is 
required to sustain microbial growth. Depletion of oxygen 
then serves to encourage the growth of anaerobic bacteria. 

There are several genera of dissimilatory anaerobic bacte- 
ria known as Sulphate Reducing Bacteria (SRB). Two of the 
most important are Desulfovibrio spp. and Desulfotomaculum 
spp. The latter has the ability to produce resistant spores, 
which can tolerate prolonged exposure to air and can survive 
the application of many biocides currently available. 

Both of these particularly insidious strains of SRB are 
highly dangerous and in their most virulent form, will quickly 
corrode hull, machinery and equipment. 
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2.2 Sources of Microbial Contamination 


Operational problems due to microbial contamination may be 
due to imported infested hydrocarbons and seawater, previ- 
ous onboard contamination, a combination of both or result 
from poor onboard operational procedures. 


2.2.1 Seawater 


Oceans usually contain less than 10° bacteria per cm’ and 
negligible quantities of yeasts and moulds. Only 0.1% of these 
bacteria will be hydrocarbon degrading and SRB is even rarer. 
However, seawater confined in harbours and estuaries with 
a long history of oil spillage, oil tank and sewage discharges 
will contain far in excess of 10° bacteria per cm’, including 
hydocarbon degraders and large numbers of SRB. Addition- 
ally, phosphorus and nitrogen pollutants from agricultural 
fertilisers, plus corrosion inhibitors and oil additives, will 
ensure that sufficient nutrients are present to nourish SRB. 
Consequently, harbour and estuary seawaters which might 
contain up to 11 ppm of nitrogen and 2 ppm of phosphorus, 
are far more nutritious to rapacious microorganisms than the 
water in the oceans, which would not contain more than 1 
ppm of nitrogen and phosphorus. 


2.2.2 Refinery Practices 


Recent years have seen a dramatic increase in contaminated 
distillate fuel oils being supplied. This is then compounded 
by poor housekeeping standards at bunkering facilities. 


Controls: Poor quality control standards and relaxed house- 
keeping at refineries, tank farms and delivery barges can be 
responsible for fuel contamination. Recently, imported 
infected gas oil cargoes from Eastern Europe have been 
distributed for use on ships. In many cases, the contamination 
was detected before being used onboard and was successfully 
counteracted with heat, filtration and biocidal treatment. 
However, not all ships were so fortunate. 


Storage: Another source of microbial contamination is intro- 
duced when shore storage tanks are cleaned and washed 
using polluted river water. This will not only introduce fuel 
adapted microbes but also vital nutrients, particularly nitro- 
gen and phosphorus. However, it does not mean that tanks 
which are infected will always deliver ‘unfit for use’ contam- 
inated fuel. Microbes aggregate at the fuel/ water interface but 
are readily dispersed in the fuel by modest agitation; they have 
a specific gravity of about 1.05, and settle slowly back to the 
interface. Fuel drawn from the top of an infected but undis- 
turbed tank will be reasonably clean. Conversely, if the draw 
off is taken by floating suction during a fast delivery when the 
tank level is low, this will result in heavily contaminated fuel 
The outcome could be severe operational problems within a 
few hours of using the infected fuel, as shown in Figure 2.9 

Floating roof storage tanks usually permit some water 
ingress through the seals. In a polluted atmosphere this may 
carry in nutrients. Even if a floating roof tank is empty it 
should still be regularly drained and manholes should not be 
left open. This admits light, allowing algae to flourish and 
hence builds up a food chain for microorganisms. Fuel 
residues in the tank complete the nutritious environment 
Should storage tanks be left empty for long periods, they may 
need decontamination before re-use 


Process: The major factors contributing to the increase in 
microbial problems in the marine industry, are due to changes 
in the fuel supply 


Figure 2.9 
Storage tank microbial contamination resulting in 
growth proliferation, corrosion products and 
deterioration of fuel quality 


1. Changes in base oils, refining and blending; the size, satu- 
ration and configuration of hydrocarbon molecules 
influences their biodegradability. 

Changes in the type and range of fuel additives; these 

frequently contain nitrogen and phosphorus, vital 

elements for growth. 

3. Changes in product handling and distribution; faster 
throughput permits less time for particulates and water 
to settle and, at the refinery, less time for the product to 
cool. This has exacerbated the problem by making the fuel 
more nutritious to contaminating microbes. 


N 
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Fuel oils have so far only experienced heavy infection in 
gas or diesel oils of the distillates. The higher incidence of 
contamination in distillates is no doubt due to the predomi- 
nant molecular types. Black distillates are all the more 
vulnerable due to the abundance of trace elements emanating 
from quantities of residual fuel and the cutterstock used 
during blending. 

It is quite a common occurrence for sulphides to be 
produced by the activities of SRB whenever wet fuel is stored 
or transported. Present in the water phase, SRB activity is stim- 
ulated in the presence of fuel oil and contaminated water. This 
activity occurs when hydrocarbon degraders create the anaer- 
obic conditions, acid and alcohol food sources, and shift the 
overall pH value of the oil/water phase necessary for SRB 
proliferation. 


2.2.3 Onboard 


Operational problems relate to the hazards in various systems 
onboard, but full consideration should first be given to the 
source of contamination. 


Bilges: Polluted waters and a continuous supply of hydrocar- 
bons into bilges which may not always be pumped dry, all 
contribute to microbial problems. SRB activity is clearly 
evidenced in high rates of corrosion and tends to be localised 
around specific areas, forming pits and eventually holes. 


Fuel Oil: There will always be an initial source of shipboard 
fuel contamination such asa shore tank, a dirty pipe line, road 
tanker or polluted tank wash water. Airborne contamination 
via tank breathers is less likely. Once infestation has occurred, 
particular circumstances may encourage microbial prolifera- 
tion onboard. Further inoculation is then immaterial as the 
key aggravating factors are water and warmth. 

Water accumulates in tanks when there is no drain or 
water scavenge system, where the drain is not at the lowest 
point in the tank and where draining procedures are not 
enforced. 

Tanks in the engine room or other warm locations and 
tanks receiving recirculated distillate fuel from injectors, are 
ideal to incubate microbes, as shown in Figure 2.10. 

The double bottom tanks due to the lower temperatures 
are less prone to microbial proliferation. 


Figure 2.10 
Sulphate reducing bacteria corrosion of fuel injectors 


Lubricating Oil: Lubricant operating 
crankcase oils in wet engines are normally sufficient to control 
and prevent infestation. Any problems are usually associated 
with ships which have shut down their lubricant system 
allowing temperatures to drop and water to accumulate. 

Microbial growth in mineral hydraulic oil systems are 
prone to attack. This is due to the operation of the system 
generating heat and the bulk temperature will then probably 
be high enough to stimulate microbial growth. If air is 
entrained, oxygen will dissolve according to its partial pres- 
sure and aerobic microbial growth will be sustained, as shown 
in Figure 2.11. 
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Changes in hydraulic oil due to growth of microorganisms 


Microbes are not inhibited or destroyed by the range of 
pressures in common use. It is also possible that they can 
contribute to cavitation damage by acting as bubble nuclei. 

Controllable pitch propeller hydraulic oil systems have 
been particularly vulnerable to microbial spoilage and fouling 
problems. This has resulted in biocides being incorporated 
within the hydraulic oil formulation, as shown in Figure 2.12 


Figure 2.12 
Microbial slime in hydraulic oil system 
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2.3 Symptoms of Microbial Contamination 


Functional operational problems are commonly encountered 
after severe infestation by microbes, following early warning 
signs. This enables preventative and successful remedial 
measures to be undertaken. The visual and operational warn- 
ing signs of hydrocarbon and bilge/ballast water infection, 
which although individually may be ascribed to other causes, 
should in combination alert the marine engineer to a poten- 
tially hazardous situation, as illustrated in Figure 2.13. 


Fuel Oil: When heavily infected fuel is used, all or some of 
the phenomena listed in the symptoms of microbial contam- 
ination, will confront the engineer within a few hours. In the 
first case he will probably be faced with filter plugging, fuel 
starvation, injector fouling and, if coalescers are in use, they 
will malfunction. The extent of the contamination must first 
be established via the following procedure. 


1. Clear glass sample bottles rinsed with boiling water 
should be used to take drain or bottom samples from 
service, header and storage tanks. 
Microbial contamination in a sample will be apparent as 
a haze in the fuel from the presence of sludge, as shown 
in Figure 14. This sludge readily disperses in the fuel when 
the sample is swirled; at this time sticky ‘cling film’ flakes 
may be seen adhering to the wall of the bottle. The water 
will be turbid and there may be some bottom sludge; if 
this is black, there are SRB present and they will be an 
added corrosion hazard. 

The engineer can now evaluate the various fuel locations 

and instigate an emergency strategy by using the cleanest 

fuel. If only heavily contaminated fuel is available, it 
should first be allowed to settle for as long as possible and 
then drawn off from the top to a clean tank, preferably via 

a filter, purifier, centrifuge or coalescer. Using a biocide at 

this stage is usually not advisable due to a tendancy to 

block filters with the dislodged biofilms. 

4. At the earliest opportunity, drain or bottom samples 
should be taken and the supplier’s retained sample should 
be forwarded for microbiological examination. This will 
identify, by sophisticated ‘fingerprinting’ if the bunkers 
supplied were contaminated. 
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Lubricating Oil: There are many thousands of types of 
microbes; only a few are able to grow in lubricating oils at the 
elevated operational temperatures in use. Providing the plant 
treatment equipment is functional, purifier heater tempera- 
ture is maintained and the water content kept ata minimum, 
the lubricating oil system will be both environmentally and 
nutrient deficient. Such conditions will prevent microbes from 
establishing themselves. Should heavy contamination of the 
lubricating oil system occur, this self regulating mechanism 
will be unable to prevent microbial proliferation. Fortunately 
the symptoms of microbial contamination will not occur 
immediately, allowing the engineer to implement corrective 
physical and/or chemical decontamination programmes 


Bilge and Ballast Water: Microbial problems in bilge and 
ballast systems are usually associated with SRB pitting corro- 
sion. In the majority of cases, their presence will be identified 
visually and by a distinct sulphurous smell. These warning 
signs of potential problems, should ensure preventative 
measures are applied in sufficient time to prevent structural 


damage 


i) | MEDIUM FUEL LUBRICANT BILGE & BALLAST WATER 


Visual Aggregation of microbes into a biomass, | Slimy appearance of the oil; the slime The formation of slimes 
observed as discolouration, turbidity and | tends to cling to the crankcase doors. and sludges which are black 
fouling. themselves or are black when 

Rust films. scraped. 


Biosurfactants produced by bacteria 
promote stable water hazes and Honey-coloured films on the journals, Pitting of steel work, pipes 
encourage particulate dispersion. later associated with corrosion pitting. and tank bottoms. 


Purifiers and coalescers which rely on a Black stains on white metal bearings, Rapid corrosion of plating. 
clean fuel/water interface, may pins and journals. 
malfunction. 
Brown or grey/black deposits on metallic 
Tank pitting. parts. 


Corrosion of the purifier bow! and newly 
machined surface. 


Sludge accumulation in crankcase and 
excessive sludge at the purifier discharge. 


Paint stripping in the crankcase. 


filters and orifices within a few hours. smells. 


(=) Operational Bacterial polymers may completely plug Additive depletion. Unusual foul or sulphitic 
Rancid or sulphitic smells. 


Filters, Pumps and injectors will foul and Structural damage. 
fail. Increase in oil acidity or sudden loss of 
alkalinity. (BN) Loss of suction in pipelines. 


Non uniform fuel flow and variations in 
combustion may accelerate piston rings Stable water content in the oil which is not 
and cylinder liner wear rates and affect resolved by the purifier. 
cam-shaft torque. 
Filter plugging in heavy weather. 


Persistent demulsification problems. 
Reduction of heat transfer in coolers. 


Figure 2.13 
Symptoms of microbial contamination of fuel, lubricants and bilge/ballast water 


Figure 2.14 
Contaminated fuel oil indicated by its haziness appearance 
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3. SYSTEMS AFFECTED BY MICROBIAL 
CONTAMINATION 


3.1 Fuel Oil 


Microbiological contamination of hydrocarbon distillate fuels 
(gas oils, rather than residual fuel oils) is a well-recognized 
problem. The reason for this increase in the marine industry 
is largely due to changes in the chemistry of distillate fuels 
and widespread use of fuel additives, some of which stimu- 
lates microbial growth. 


Composition of Distillate Fuels: Distillate fuel oils such as 
gas oil, diesel and kerosenes suffer from microbiological attack 
(oxidation) due to their chemical composition. They contain 
a wide range of compounds (diesel contains more than 250) 
but are primarily composed of n-alkanes (50% mostly with 
carbon numbers between 10 and 18), other straight chain, 
branched and cyclic alkanes, aromatic hydrocarbons (e.g. 
benzene, toluene, xylene) in variable proportions up to 25% 
and polycyclic compounds. The fuel therefore has abundant 
carbon sources for microbiological growth but is deficient in 
inorganic nutrients such as nitrogen, phosphorous and potas- 
sium. These elements are often the limiting factors in microbial 
degradation of the fuel and must be supplied from an external 
source, such as polluted water remaining in shore storage 
tanks after washing, fuel additives or extraneous water entry 
into the system. 

In fuel, the most readily biodegraded fraction of the fuel 
is that of the n-alkanes. Under oxygenated humid conditions, 
complete removal of n-alkanes can take place within a few 
days. Other compounds may be more toxic or more resistant 
to attack — for example, alkanes with a carbon number of less 
than 9 and some aromatics, are highly water soluble and have 
been shown to resist microbiological degradation. In most 
cases, however, these compounds can be utilised by one or 
more microbial groups and will be attacked when physical 
and/or chemical conditions are favourable. Utilisation of such 
recalcitrant compounds often occurs after complete biodegra- 
dation of the more readily available compounds. 

The general chemical formula of the n-alkanes is: CH, 
(CH,),-CH, [simplified to R-CH,], with carbon atoms 
arranged in a straight chain. Branching may occur and this 
generally increases the resistance of the compound to micro- 
biological attack. With straight chain n-alkanes, oxidation 
occurs by a number of mechanisms which can be represented 
as indicated; 


R-CH, + Reduced Enzyme +0, -> 
R-CH,-OH + Oxidised Enzyme +H,0 


The process requires oxygen and liberates primary alco- 
hols and water. Once microbial oxidation has begun, 
conditions can be self perpetuating, with free water and 
further carbon sources being produced. Other microbial 
groups are now able to utilise the breakdown products, in turn 
yielding further carbon compounds as below. 


R-CH,-OH 
Alcohol 


R-CHO 
Aldehyde 


R-COOH 
Fatty Acids 


CH,COOH 
Acetic Acid 


Once conditions are suitable for microbial growth, fuel 
biodegradation may be rapid, with a diverse and very active 
microbial flora established in the water phase. 

The overall result is that fuels are more nutritious to 
microorganisms and at every bunkering their food source is 
replenished. This is particularly evident when water is present 
during their transportation or storage. During operation, 
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infestation may arise either with contaminated oil being 
brought onboard at bunkering, or actually develop onboard. 
Usually, both factors work in combination. Specific microbes 
establish themselves in fresh and saline water, and either type 
may enter fuel storage tanks through condensation or more 
direct contamination. A relatively small amount can initiate 
the microbiological process, and this will rapidly accelerate, 
since carbon, nitrogen, sulphur and phosphorus compounds, 
which are nutrients to the microorganisms, are all present in 
distillate fuel. This can produce a varied range of effects which 
can be directly and indirectly attributable to microbial 
contamination. The microbiological process is as follows. 


Microbiological Process: Until recently, users of fuels seemed 
better able to accommodate minor degrees of microbial 
contamination without experiencing operational problems. 
The reasons are explained as follows: 


1. Evolution of microorganism species has now spawned a 
new type of bacteria in distillate fuels, which produces a 
sticky polysaccharide polymer, similar to ‘cling film’. This 
rapidly clogs filters and apertures by trapping particulate 
matter such as rust, as shown in Figure 3.1. Asa result, the 
microbial contamination will be apparent as a haze in the 
fuel and a grey/brown sludge at the water/oil interface. 
This polysaccharide polymer by-product is viewed as the 
most significant factor emerging from contamination 
problems., as shown in Figure 3.2. 


Figure 3.1 
Fuel oil filter blockage from clean, initial and 
severely contaminated by stages 
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Severe microbial activity is also associated with stagnancy, 
as in long term storage holding tanks, or those with slow 
turn-over consumption rates such as double bottom tanks. 
The result is that fuel may be degraded, reducing the 
hydrocarbon chain length and thereby reducing the fuel’s 
overall calorific value. Furthermore, microbial metabo- 
lites such as hydrogen sulphide gas, can cause ‘souring’ 
of the fuel. When altering the fuel’s hydrocarbon molec- 
ular structure, chemical and physical changes are 
observed affecting the pour point, cloud point and thermal 
stability, which will be measurably different. 


() 
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In addition, bacteria which are prolific producers of 
biosurfactants will after time, establish stable water hazes. 
The fuel may eventually fail specification tests for water 
separation. Since coalescers rely on a clean fuel/ water 
interface, equipment malfunction is possible. 

4. Where infection is particulary severe and long standing, 
corrosion may occur. This may be due to the activity of 
SRB which require oxygen depletion and hence fuel stag- 
nation. SRB produce corrosive hydrogen sulphide which 
can dissolve in fuel. Additionally, SRB stimulate local 
corrosion processes by direct sulphide attack and depo- 
larisation of steel surfaces, causing pitting and even 
complete penetration of tank bottoms. Most microbes, but 
particularly moulds, produce organic acids, as shown in 
Figure 3.3. These acids, produced by oxidative attack on 
the fuel, will lower the phase pH and contribute to corro- 

Figure 3.2 sion, particularly of copper, aluminium and its alloys, such 

Fuel oil microbial spoilage by stages as bronze, as shown in Figure 3.4. 


Figure 3.3 Figure 3.4 
Growth proliferation of moulds forming a floating mat, Aluminium bronze purifier component eroded by 
resulting in microbial pitting corrosion organic acids produced by moulds 
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Figure 3.5 
Survival rate of three strains of pseudomonas spp 
bacteria in kerosene 
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As well as visual and odoriferous characteristics of 
contamination, the most common operational problem is 
filter blocking. Engines running on gas oils and diesel fuels 
generally have an in-line filter to remove any particulate 
and/or sludges before the fuel enters the combustion 
chamber. Aggregation of microbes into biomass causes 
filters and injectors to foul and ultimately, permanently 
fail. In turn, the fuel flow is altered and becomes non- 
uniform, the combustion pressures become more varied 
and accelerated wear rates of both the piston rings and 
cylinder liners occur. 


Microbes are generally unevenly distributed throughout 
the two-phase oil/ water system. Composed of many species, 
their varying life spans, ease of multiplication, preference for 
existing as discrete cells or aggregated together as large 
biomass communities means that they may adapt themselves 
to survive under most conditions, as shown in Figure 3.5 and 
Figure 3.6. 

Fuel fouling is predominately an ‘end-user’ problem, 
experienced as blocked fuel filters, pumps and injectors. The 
trend to use finer filters on engines, increases the risk of block- 
age and aggravates microbial problems. This is not surprising 
given the fact that microorganisms can survive at the 
oil/ water interface, in water droplets trapped within the oil 
phase, or as a biofilm on the internal surface of the tank, as 
shown in Figure 3.7 and Figure 3.8. 

Stormy weather creates many of these interfaces and 
distributes microbes from the tank bottoms into the upper 
layer of fuel. However, it is often difficult to pinpoint the exact 
source of the problem, as each tank in the line of transfer must 
be considered as its own distinct environment, with the poten- 
tial to support microbial growth. 

Resolution of fuel contamination problems is not 
addressed in the present IS08217 1987 fuel standards, since 
these do not specify microbial levels, stating only that the 
fuel’s quality should be ‘fit to use’. Thus, it appears that the 


Lloyd’s Register Technical Association 


Figure 3.6 
Survival rate of three strains of cladosporium spp 
moulds in kerosene 


best remedy at present would be for ship owners/ operators 
to persuade suppliers to provide microbially free clean fuel. 
The onus is then on the ship operator to ensure that microbial 
problems do not establish themselves onboard. In the long 
term, it is clear that adequate protection should be provided 
by stipulating acceptable microorganism levels in future fuel 
standards. 

However, although distillate fuels and 30 cst intermediate 
fuels have experienced problems, the high temperatures 
required for using heavier residual fuels (maintained through- 
out the bunker tanks, centrifuges and service tanks) dissuade 
virtually all microorganisms. 


- 


Figure 3.7 
The initial stage of bacteria infestation 
within water droplets 


Figure 3.8 
The initial stage of moulds infestation 
within water droplets 


3.2 Lubricating Oil 


As for fuel, microbial growth occurs in the water associated 
with the lubricant, and the phenomenon is therefore charac- 
teristic of crankcase oils in wet engines, particularly those with 
water cooled pistons. Lubricant infection which includes 
hydraulic oils, can be identified by slimy film formation on 
the crankcase doors, there may be a rancid odour and white 
metal parts may be stained black. With progression of the 
problem, filters choke up, organic acids are formed and the 
oils tend to emulsify, as shown in Figure 3.9. 
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Figure 3.9 
Interactive problems associated with microbial corrosion 


If SRB are present, a particular problem associated with 
laid up ships, copious pitting of ferrous and non-ferrous 
metals may occur, as shown in Figure 3.10. 

Since microorganisms feed upon the additives within the 
oil, the lubricity of the oil may be impaired, its viscosity 
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Figure 3.10 
Lubricating oil cooler (oil side) corrosion 
of tubes and stays 


altered, there is a greater resultant acidity and increased 
potential for emulsification and corrosion. Hydrogen 
sulphide may also be produced as a by-product. Should these 
factors occur at the same time, this will result in serious corro- 
sion problems within weeks of the initial contamination. 

Sources of contamination within the lubricant are the fuel, 
cooling water and seawater. Cooling water has especially 
featured as a common contaminant of crankcase oil at engine 
operating temperatures, since the use of chromates as corro- 
sion inhibitors are banned. The use of chromates also acted as 
an effective anti-microbial biocide. 

Prevention is better than cure, and it is known that micro- 
bial growth is retarded by extreme alkaline conditions. To 
date, there have been no microbial problems reported with 
medium speed engines during operation, when using highly 
alkaline lubricants of BN 12 to 40. However, at such elevated 
temperatures, lubricating oils tend to be self- sterilising. 

Unfortunately though, there still remains the possibility 
of infestation from contaminated bilges and tank tops 
which may inadvertently leak into the oil system, as shown 
in Figure 3.11. 


Figure 3.11 
Machinery corrosion and oil system contamination 
from tank top water ingress 


3.3 Cooling Water 


Microbial contamination is often identified in engine cooling 
water and asa result can destroy the corrosion inhibitor chem- 
icals. The result is that the coolant may smell and discolour, 
develop slimes/scum and gradually become acidic. If it is of 
an oil emulsion type the emulsion may split into two layers. 

Cooling water containing corrosion inhibitors is normally 
alkaline at about pH 8-9. Since the system is in circulation and 
aerated in use, any initial microbial contamination is normally 
due to aerobic bacteria. However, oxygen deficiencies occur 
as the flora increase and it has been found that many of these 
bacteria are capable of obtaining their oxygen by rapidly 
reducing nitrite, an anti-corrosive ingredient. The nitrite is 
then reduced to ammonia or nitrogen gas and the water 
rapidily becomes corrosive. After some time, cooling water 
may be sufficiently anaerobic to allow SRB to proliferate. 
When this occurs, with the simultaneous dispersion of the 
nutrient phase, rapid growth can cause spoilage within days. 

If severe fouling takes place, heat transfer will be preju- 
diced. 

If there is visual evidence of infection, it is desirable to 
conduct confirmatory tests. Onboard test methods can be used 
and/or samples sent away for professional examination and 
advice. 


3.4 Bilge Water 


To understand the microbiological and corrosion processes, 
no one species can be singled out from the consortia of 
microorganisms. Many hundreds of different species may be 
within each consortium, differing not only from ship to ship 
but within the same section of a system. Although many of 
these species of bacteria, yeasts and moulds can be identified 
and named, those parameters which optimise microbial 
proliferation and corrosion must relate to a consortium rather 
than the individual species. Micro-environments are even 
known to exist within consortiums and differ incrementally 
in terms of pH, oxygen, electrode potential (Eh), chemical 
composition and nutrients. The microbiological process is 
explained as follows: 


Microbiological Process: Hydrocarbons and occasionally 
other organic wastes contaminate the bilge water and become 
food for microorganisms; the oils are initially degraded by 
specialised microorganisms termed ‘hydrocarbonclastic’, as 
shown in Figure 3.12 and Figure 3.13. 
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Figure 3.12 
Cladosporium resinae growing around a 
fuel oil droplet in water 
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Cladosporium resinae indicating branched hyphae, 
conidiophae and spores 


This degradation occurs only in the presence of dissolved 
oxygen; microbes which use oxygen in this way are called 
aerobes. During aerobic degradation, soluble partially 
oxidised compounds are formed and migrate throughout the 
water, in turn becoming nutrients for other microorganisms, 
particularly the dissimilatory SRB. SRB cannot themselves 
feed on hydrocarbons but only upon the organic acids, 
carboxylic acids and alcohols produced by hydrocarbon 
degraders; SRB extract and use the oxygen in sulphate to 
oxidise their organic food and cannot tolerate molecular or 
dissolved oxygen. Organisms which are intolerant of oxygen 
are called anaerobes. They are protected from oxygen by the 
activity of the hydrocarbon degrading microbes which strip 
out and utilise the dissolved oxygen. 

The hydrocarbon degrading bacteria can also change the 
electrode potential (Eh) from between +200 to 300 mV positive 
toa value which could be greater than -100 mV negative. This 
is another essential parameter for SRB profileration. 

The exact boundary in the bilge water below which SRB 
can flourish depends upon the rate of re-oxygenation of the 
surface (a function of the size of the air/water interface and 
agitation), and the rate at which the hydrocarbon oxidising 
bacteria can deplete oxygen. In bilge water this boundary will 
probably only be realised deep in the bilges or part way 
through deposits of mud and slimes on the bottom plates. Any 
sulphate in seawater is reduced by SRB to corrosive suphide; 
some of this is assimilated as a nutrient for the reproducing 
SRB, but most of it disperses into the micro-environment, i.e. 
it is dissimilated. Many other microorganisms reduce small 
amounts of sulphate to sulphide, but consume most of it as a 
nutrient; this is assimilatory sulphate reduction and is not 
significant in corrosion. 

Other sulphur sources such as sulphurised oil and 
sulphonates can be degraded by microbes to yield hydrogen 
sulphide, evolved during protein putrefaction and typified by 
its offensive odour. Some of the sulphide produced will be re- 
oxidised to sulphur, pyrite and polysulphides in the more 
oxygenated regions of the bilges. 


Distribution of Microorganisms: Although most samples for 
microbiological examination are drawn from the bilge water, 
very many of the microorganisms present will be entrained 
in slime on the plate surface (the biofilm) or dispersed in 
sludge deposits and corrosion product aggregates. This is 
particularly true of SRB; thus any positive findings of SRB in 


the bilge water suggest that very large numbers of SRB are 
present on the steel plates. SRB may be present but relatively 
inactive if an appropriate consortium of other organisms is 
missing or physical conditions are sub-optimal. 

The probable distribution pattern of organisms, nutrients 
etc, in the bilge water, are illustrated in Figure 3.14. 
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Figure 3.14 
Physical, chemical and microbial changes in 
bilge water in relation to depth 


Obviously if samples are taken and tested, different results 
will be obtained at different depths. It is apparent that for 
severe pitting corrosion to occur, the bilge water must be 
infested by the right mixture of microorganisms and 
favourable conditions must prevail; first for substantial prolif- 
eration of the hydrocarbonoclastic microbes and then for the 
SRB, as shown in Figure 3.15, Figure 3.16 and Figure 3.17. 

These conditions relate to the increased corrosion prob- 
lems which are being experienced. 


Figure 3.15 
SRB viable single cell about 441m long with nutrient 
storage granules 


Corrosion Process: Steel hull perforation by pitting corrosion 
is now routinely observed onboard workboats where microor- 
ganisms accelerate the usual electrochemical corrosion 
mechanisms. The actual microorganism corrosion process 
may be simplified into three distinct stages: 
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Figure 3.16 
SRB viable single cell before fragmentation 
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Figure 3.17 
SRB viable single cell after fragmentation 
reproducing many cells 


1. Aerobic microorganisms aggregating in slimes, muds or 
crevices use up the available oxygen in their immediate 
vicinity and create an oxygen deficient area. In electro- 
chemical terms, such an area will be anodic in relation to 
relatively oxygen rich zones with fewer microbes. This 
oxygen gradient may be regarded as an electrochemical 
cell, precipitating the electron flux from the cathode to the 
anode, allowing deep anodic corrosion pits to develop. In 
addition, the microbial by-product which is a very corro- 
sive acid, also acts as an electrolyte within the cell. 
The formation of pits is not entirely an electron process 
based upon aerobic bacteria. These oxygen deficient areas 
are colonised by the anaerobic SRB, which produces HS- 
and S2- ions and hydrogen sulphide. These ions are highly 
aggressive towards steel and yellow metals, and form the 
characteristic craters. In carbon steel, a carbon skeleton 
remains visible as a graphite black colour and the bottom 
of each pit is usually black ferrous sulphide. 

3. Simultaneously, SRB hydrogenase enzymes depolarise 
the surface steel. The steel becomes progressively more 
porous, susceptible to hydrogen ingress and hydrogen 
embrittlement. When ferrous sulphide forms, it is itself 
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cathodic and thus continues to drive the electron flow and 
anodic pitting, even after the SRB have died or become 
less active. Corrosion driven by ferrous sulphide is 
thought to be most pronounced during intermittent aera- 
tion or in the presence of oxygen gradients. 


These three distinct corrosion mechanisms, emanating 
from oxygen, SRB and ferrous sulphide can occur sequentially 
or simultaneously, as shown in Figure 3.18. 
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Figure 3.18 
Anaeorobic corrosion by sulphate reducing bacteria (SRB) 


The net effect is dramatic; a corrosion rate of about 0.05 
mm a year in clean seawater can be accelerated by microbial 
enhancement to produce craters several centimetres in diam- 
eter at the surface and deep pits. In one authenticated report, 
anew 10mm hull plate perforated in less thana year, as shown 
in Figure 3.19. 


Figure 3.19 
SRB corrosion of hull plates after only 9 months 
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Factors Controlling Microbial Proliferation: There are 
several factors which contribute to microbial growth and these 
are as follows: 


1. Polluted waters: The concentration of pollution within 
inshore waters, will ensure that any seepage into bilges 
will be adequately infected with all of the necessary 
microorganisms, to initiate corrosion. 

Nutrients: Microbial proliferation is dependent upon the 

percentage of nutrients, such as phosphorus and nitrogen. 

Chemical contamination of inshore water meets this 

condition. 

3. Temperature: Microorganisms prefer the temperature 
range 15-35°C. Conditions within the bilge are ideal, since 
they are typically kept at about 15°C. SRB are particularly 
temperature sensitive and experience a tenfold decrease 
inactivity at5°C. However, discharges of warm water into 
particular bilge sections tend to promote microorganism 
growth and initial attack in these areas. 

4. Stagnation: Regulations restricting pumping, coupled 
with environmental regulations in the use of chemical 
treatment in bilges and in fuels, exacerbate existing prob- 
lems. The inevitable result is to accumulate stagnant bilge 
water onboard which promotes SRB proliferation. Regu- 
lar pumping of bilges not only prevents stagnation but 
also removes the main sources of microbial nutrients. This 
action removes the aerobic bacteria themselves and lowers 
the oxygenated water /air interface to a level which could 
be inhibitory to SRB on the bottom plates. 

pH: Since hydrocarbon degrading bacteria tend to lower 

the pH by producing organic acids, and SRB effectively 

raise the pH by feeding on these acids, removing the acidic 

sulphide ions and monitoring the pH value provides a 

useful first identification guide. The pH range suitable for 

SRB is between pH 6-8. 

6. Onboard contamination: Stimulatory nutrients can be 
present in the bilge itself, originating from urine, food 
wastes and sewage. Any traces of detergent will emulsify 
the oil and render it more available to the hydrocarbon 
degrading microorganisms, by creating greater interfacial 
oil/ water surface area. 
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Correlation between Microorganism Species and SRB 
Corrosion: Although the microbiological and corrosion 
processes are known, as are the factors controlling microbial 
proliferation, no precise correlation from analytical data can 
predict when corrosion pitting is imminent. Problems in corre- 
lating microbial test results of bilge water samples are affected 
by the variety of microbial environments within the bilges, 
pumping restrictions, pumping intervals, position of sample 
and onboard practices. The results from laboratory tests have 
indicated certain correlations between microbial species and 
SRB corrosion, which identifies the initial requirements for 
microbial corrosion. 

During the tests, the Total Viable Count (TVC) per ml of 
aerobic bacteria was determined and the yeasts and moulds 
contamination, as well as the SRB presence which were 
assessed semi-quantitatively. The pH was measured for most 
samples. The results from these tests are indicated. 


1. These measurements indicated that different sections of 
the bilge may differ in their stimulation of SRB. 

Asa whole the results suggest that SRB tend to proliferate 
when aerobic bacterial numbers are high, although there 
is no absolute correlation. 

There is no correlation of SRB with the numbers of yeasts 
and/or moulds or with pH. 

4. There is however, correlation between yeasts /moulds 
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proliferation and pH, proliferation being favoured at spH 
6.9 and suppressed at 2pH 7.0. This is more marked when 
SRB are also present. 

5. The presence of SRBis strongly correlated with high (TVC) 
for bacteria (but not with the presence of yeasts /moulds) 
and, more importantly, with greatly accelerated pitting 
corrosion. Corrosion seems to be most severe at slightly 


alkaline pH. 


Rectifying bilge water contamination is not easily 
addressed but corrosion problems can be prevented by imple- 
menting correct procedures. 


3.5 Ballast Water 


The corrosion of ballast tanks follows the same electrochem- 
ical process resulting in SRB crevice corrosion damage, but is 
dependent upon nutrient concentrations such as nitrogen and 
phosphorus within the water and accumulation of muds, 
slimes and sludges on the tank bottoms. 

An additional risk in ballast water is that it can also 
harbour microorganisms, of the type which not only endan- 
gers the ship’s condition but also human health. 

In November 1991, a strain of cholera was discovered in 
the ballast water of three ships at ports on the east coast of the 
United States after the ships had called at ports in South Amer- 
ica. In June 1992, a further two ships intercepted at eastern 
United States ports were found to have traces of cholera in 
their ballast water. In Australia, scientists examining the 
ballast water of a Norwegian ship which arrived at a Queens- 
land port from Singapore, discovered a strain of organism 
which could cause botulism in animals and humans. 

Ballast water can also transport a host of other unwanted 
organisms. Non-indigenous species have been introduced in 
other parts of the world through off loaded ballast water. 
These species have acted both as predators and competitors 
to indigenous microorganisms. Invading plankton species 
have caused toxic algal blooms and other invading species 
have acted as parasites, pathogens and disease carrying 
agents, so wreaking havoc in their domiciliary oceans, rivers 
and lakes. 

In response to these dangers the following steps can be 
taken: 


Avoid taking on ballast in shallow waters; 

Keep an accurate record of where ballast is loaded; 
Endeavour to exchange ballast water at sea where organ- 
isms are rarer; 

4. Only discharge ballast into approved areas of the port. 


A di 


Reballasting at sea before ships enter local waters has been 
advocated in certain quarters as a permanent solution, but is 
not a satisfactory answer. Random tests have shown that of 
ships which claimed to have exchanged their ballast in mid- 
ocean, almost half still contained significant amounts of 
sediment with Dinoflagellate cysts. In one case, these organisms 
survived two changes of ballast water. 

Combating microbial contamination of ballast water still 
requires more field testing for its resolution. These field tests 
could include removal and/or extermination of organisms 
in ballast water via microfiltration, ultraviolet, ultrasonic 
and thermal treatment, altering the salinity, and sediment 
management. 

The most obvious immediate solutions for the effects of 
microbial contamination are to segregate ballast tanks and to 
use appropriate epoxy resin coatings. Another option is the 
chemical treatment of ballast water, but this may cause as 
much environmental damage as some of the microorganisms 
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themselves, if allowed to be discharged within restricted 
areas. An alternative and well established solution would be 
to heat the ballast water to kill the microorganisms; in practice 
this is far too expensive and time consuming to offer a practical 
remedy. 


3.6 Distillate Cargoes 


Very many types of microbes can utilise hydrocarbons as a 
nutrient and energy source. However, in time, consortia 
develop which are adapted for optimum growth in a partic- 
ular fuel and given environment. Development of problems 
is related to the mixture of organisms, types and numbers, but 
there are no hard and fast rules. For example, although bacte- 
ria might be found in clean seawater they will probably not 
be a potential fuel hazard. Microbes from a previous gas oil 
problem would be an immediate hazard to fresh gas oil. 

When a cargo of fuel is rejected because of microbial 
spoilage, it becomes important to isolate the dominant 
microbes in the consortium and identify them accurately. All 
sources which could have contributed to the spoilage consor- 
tium should be sampled and tested; usually relevant samples 
already exist, from load port storage tanks, individual ship’s 
tanks at load and discharge ports and receiving tanks (before 
and after filling). Bacteria and yeasts can be accurately finger- 
printed by subjecting them to a battery of tests. A useful set 
of tests (API 20 NE) can be obtained for fingerprinting bacteria 
by assigning a numerical profile to them. The tests are carried 
out in triplicate and in each set of three, negative results are 
rated 0 and positive results score either 1, 2, or 4. The first trip- 
licate set consists of: 


Reduction of nitrate Oorl 
Tryptophan degraded inindole Oor2 
Glucose degraded to acids Oor4 
Total score 2 


Thus, three positive results would score 7, the first two 
results being positive would score 3 and so on. Using seven 
sets of three tests a seven figure digit is built up (e.g. 1140575 = 
Pseudomonas aeruginosa). The name of the bacterium is not 
usually important, but the number is an accurate label which 
can discriminate between over 2 million different organisms. 
All possible sources of contamination can be tested this way 
and any microorganisms detected can be fingerprinted as 
numerical profiles. Culpability can then be deduced. The same 
strategy can be used if a ship is delayed or damaged by 
infected fuel and the source is unknown. 

Even though this technique enables the accurate identifi- 
cation and tracing of contaminating microorganisms, the rate 
and severity of spoilage cannot yet be attributed to any partic- 
ular strains of microbe. It is also not possible to fix maximum 
limit values on numbers of microbes which are acceptable in 
the fuel or water phases. 


4. PREVENTION AND ELIMINATION OF 
MICROBIAL CONTAMINATION 


4.1 Prevention 


Traditional measures for the prevention of microbial infection 
fall into three broad categories: good housekeeping, physical 
cleaning and biocide treatment. In addition, there are a 
number of alternative strategies that have been considered but 
not commercially implemented. 

A number of factors control the rate at which microbio- 
logical problems will develop and indeed, whether problems 
will develop at all: 


1. Without infestation of a system microbial problems can 
not arise. Unfortunately, this is never the case and low 
numbers of viable microorganisms will always find their 
Way into a system. 

2. If they reproduce slowly, the progeny will be removed 
whenever water is removed and large numbers of 
microbes will not accumulate. 


However, a large influx of microbes resulting in a heavily 
contaminated system will defeat this simple self-regulating 
mechanism; there are more microbes to reproduce and the 
potential for future problems will have been established. 


4.1.1 Physical Prevention 


Water is critical for microbial growth and all fuel and lubricant 
systems contain water droplets. Its presence always presages 
the potential for contamination. The amount of water required 
to support growth is not great, nor does it need to be present 
in the tank and systems all of the time. 

Thus, the first line of defence against contamination is to 
keep the system as dry and clean as possible by limiting water 
ingress and preventing the spread of microbes within the 
system. As a general rule, the more water that is present, the 
more microbial growth it sustains, yet even more critical is 
minimizing the overall oil/ water interface to limit any trans- 
fer of microbial contamination. Obvious leakage of water into 
the fuel and lubricant should be corrected immediately, but 
other sources of moisture from humidity and condensation 
entry during transportation to the ship’s tanks might be 
impossible to eliminate. When water contamination is 
detected, centrifuging and drawing off from tank bottoms is 
recommended. Thus periodic inspection and cleaning of tanks 
and systems is essential. Filters should be cleaned or replaced 
frequently depending upon their type. 

Good housekeeping is often almost impossible within the 
constraints of poor system design. Dead legs of pipework 
should be avoided and multipurpose pipes should not be used 
in case one of the pipes introduces microbial contamination 
into the system. Other aspects of good housekeeping are 
preventing cross-contamination of infected and clean tank 
systems, and guarding against accidental contamination. As 
the optimum temperature for microbial growth is in the range 
of 15-35°C, storage at this temperature should be avoided. 
Conversely, elevated temperatures are useful in that they help 
sterilize tanks and pipework. Scale and rust particles stimulate 
the growth of microbes and should therefore be removed. 
Surfactants also stimulate growth and enable microbes to pass 
more freely into the fuel and lubricant phase. 

Whilst frequent water drainage is the best preventative 
measure, modern microbial strains wrapped in their protec- 
tive polymer coating frequently remain in the tanks after the 
drains have been operated. The drain valve should be cracked 
open several times during a draining procedure to give micro- 
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bial slimes and water time to move to the exit point. Biofilm 
on surfaces will remain in place adhering to surfaces. Further- 
more, large tanks can accumulate substantial quantities of 
undrainable water. Even the most meticulous maintenance, 
however, cannot completely eliminate the potential for micro- 
bial problems. 


Fuel Oil: Fuel suppliers should be carefully selected for qual- 
ity and consistency of their products. Confirmation of 
microbial contamination in fuel using shipboard tests takes 
several days, which is more than enough time for a contami- 
nated bunker supply to infect the entire system. If water in 
the fuel is present, a sample should be taken for testing using 
shipboard tests. This will give a result within an hour and an 
initial indication of possible problems. 

Certain procedures are recommended to avoid microbio- 
logical problems: 


1. Design systems to allow maximum water drainage; 

Ensure adequate draining schedules; 

Alternate fuel tank usage to prevent stagnation, especially 

double bottom tanks; 

4. Use the cleanest water available for tank washing; 

5. Regularly clean and disinfect purifiers, filters and 
coalescers; 

6. Do not mix clean and suspect fuels; 

7. Use connections which will not allow water to mix with 
the fuel; 

8. Regularly check tank coatings and evidence of contami- 
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nation; 
9. Use test kits to check fuel samples; 
10. Audit the fuel suppliers. 


Lubricating Oil: Since the majority of operational microbial 
problems in lubricating oils arise due to infection from cooling 
water, seawater from cooler leaks and overflows of contami- 
nated bilges, plant treatment effectiveness and efficiency is an 
important remedial measure. 

Certain procedures are recommended to avoid microbio- 
logical problems: 


1. Ensure water content of crankcase oil does not rise above 
0.5%- wt.content; 

2. Check purifier suction is as near to the bottom of the sump 
as possible; 

3. Maintain minimum oil temperature after purifier heater 
at 70°C or higher for at least 20 seconds, and/or 80°C for 
10 seconds; 

4. Circulate the volume of oil in the sump via the purifier at 
least once every eight to ten hours; 

5. Regularly check coolant corrosion inhibitor concentra- 
tions are at the manufacturers’ recommended values; 

6. Monitor the microbial population of the cooling water and 
prevent water leaks into the oil system; 

7. Test for microbial contamination of the oil system and 
monitor if the oil after the purifier is sterile; 

8. Prevent ingress of contaminated bilge water; 

9. Inspect storage tanks and regularly check for water. 


Cooling Water: In many cases, it is likely that the water 
supplied to the cooling water system is not only the main 
source of microbial contamination, but also the source of 
infecting microorganisms to other systems. 

Certain procedures are recommended to avoid microbio- 
logical problems: 


1. Ensure the correct anti-corrosion chemical value is main- 
tained; 
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Monitor the alkaline level and ensure that it does not fall 

below pH 8-9; 

3. Check supply water for dissolved salts, as these will 
contribute nutrients for microbes; 

4. Insert a polished mild steel bar in the bottom of the tank 

and regularly examine it for signs of SRB; 

Test for microbial contamination in the supply water and 

cooling water system. 


on 


Bilges: The restrictions which have limited bilge pumping and 
turnover rates are probably the prime reason for the current 
increase in corrosion. Also, the design of deep narrow bilges 
is more susceptible to microbial corrosion as it is not so easily 
re-aerated from the water /air interface as flat bilges . 

It is axiomatic that once microbially enhanced corrosion 
has started, it cannot be stopped simply be adding anti-micro- 
bial chemical biocides. These cannot penetrate biofilm, sludge 
or mud at normal, safe, in-use concentration; microbes 
entrained therein survive. It has also been determined that 
once ferrous sulphide has formed it will continue to act as a 
cathode even though the SRB which generated it have been 
killed. Cleaning is a pre-requisite for successful microbiolog- 
ical decontamination and it also removes aggressive corrosion 
products. 

Certain procedures are recommended to avoid microbio- 
logical problems: 


1. Regularly pump bilges to prevent the water becoming 
stagnant. This action also removes the main source of 
microbial food i.e. hydrocarbons and their partly 
degraded by-products and aerobic microbes themselves. 
This will also lower the oxygenated water /air interface to 
a level which could be inhibitory to SRB on the bottom 
plates. 

Apply a barrier coating to the inside of the bilges. The prac- 

tical difficulties in preparing the surface and producing a 

sound, adherent coating are enormous and any defects 

would be the foci of oxygen gradient pitting, accelerated 
by aerobic microorganisms present, and not necessarily 
dependent upon the intervention of SRB. 

3. Suppress electron flux by cathodic protection (CP). Corro- 
sion rates could be reduced, but the microbial population 
would continue to flourish and would become corrosive 
inany poorly protected locations. It might only be possible 
to use CP in combination with a coating. More CP will be 
needed if biofilms are present. 
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Ballast: Problems relating to ballast tanks are usually 
attributable to SRB corrosion and are associated with several 
species, the most prominent being Desulfovibrio and Desulfo- 
tomaculum, whose spores can be resistant to both oxygen and 
chemicals. Onboard testing must target aerobic degradative 
microorganisms and anaerobic SRB. 

Certain procedures are recommended to avoid microbio- 
logical problems: 


1. Regularly inspect tank coatings to prevent pitting corro- 

sion; 

Check cleanliness of surfaces and prevent slimes and 

sludges from accumulating; 

3. If tanks are dry, monitor any water ingress and drain off 
free water; 

4. Ensure no polluted harbour water is taken onboard for 
ballast; 

5. Test and monitor for any microbial contamination. 
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4.1.2 Chemical Prevention 


Good housekeeping strategies against imported contamina- 
tion and onboard grown microorganisms are preventive 
measures which can be taken at sea. However, once a ship’s 
system has become heavily contaminated, the infecting 
microbes will pose an ongoing potential hazard and final reso- 
lution of the problem will involve the use of anti-microbial 
chemical biocides. 

Fuel and lubricant preservatives protect against possible 
minor infections over a prolonged period, being slow acting 
but persistent. 


4.1.2.1 Fuel Preservatives 


Anti-microbial chemicals are generally referred to as 
‘biocides’. Those which are designed to kill sporadic minor 
contaminations over a long period are also designated ‘preser- 
vatives’. They will not necessarily cope with major 
contamination and have the best chance of success if coupled 
with good housekeeping procedures. 

Any chemical agent used as a preservative and targeted 
at preventing the proliferation of organisms must be suffi- 
ciently water soluble to migrate into and disperse within the 
water phase. In some cases, the addition can only be made via 
fuel and hence fuel solubility or dispersancy is necessary. If 
long term preservation of a fuel is required sufficient agent 
must remain dissolved in the fuel to protect it wherever it is 
transferred. If long term protection of a tank is required, suffi- 
cient agent must remain in the water bottom despite many 
re-fuellings. If no fuel movements are envisaged it may suffice 
to add a water-soluble agent directly to the tank bottom. 
However, it is usually argued that some fuel solubility allows 
inaccessible discrete water phases to be targeted. 

Thus, the solubility ratio in fuel and water is a critical 
parameter and an agent must be selected which has the correct 
solubility characteristics for the planned use. 

An anti-microbial agent dissolved in fuel destined for 
normal engine use should: 


1. Be combustible, leaving no ash or corrosive residues; 

2. Not to be surface active; 

3. Be compatible with the fuel additives and fuel system 
components, e.g. sealants; 

4. Not affect the fuel flash point; 

5. Not promote oxidation, corrosion or gum formation; 

6. Have a safe in use concentration; ‘The Control of 
Substances Hazardous to Health’ (COSHH) regulations 
will apply; 

7. Be active against viable microorganisms in the fuel and 
water phase; 

8. Have no adverse environmental impact when discharged 
as waste from the tank drains. 


The latter characteristic is of prime importance. Chemical 
preservatives are toxic to man and the environment; some are 
deactivated by modest dilution — others must be deactivated 
by the addition of a neutralising chemical, such as bisulphites 
to neutralise isothiazolinone preservatives. The neutraliser 
must itself be environmentally acceptable — in the example 
quoted, bisulphites exhibit a chemical oxygen demand which 
may be unacceptable. 

To optimise preservation, the required water phase 
concentration should be known and preferably monitored to 
ensure that the target concentration is maintained. 

Isothiazolinone preservatives are marketed for fuel use 
under a variety of trade names and in various concentrations. 
Possibly the best formulation is one which incorporates glycol; 
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Figure 4.1 
Efficacy of decontamination strategies 


this imparts desirable solubility characteristics. A concentra- 
tion of 100ppm (1.5 ppm of active ingredients) in the fuel is 
proposed and is said to equilibrate with 81-125 ppm in the 
water phase. The water phase concentration is easily deter- 
mined and it should preferably always be above 15 ppm. 
Glycols and organo-borates are used as fuel preservatives in 
the aviation industry, but have limited use in marine fuel. 
Use of a fuel preservative requires ongoing vigilance 
which may only be possible if a ship has one source of fuel. 
Intermittent use of preserved fuel could encourage the emer- 
gence of resistant microbes, exacerbating existing problems. 


4.1.2.2 Lubricant Preservatives 


Onboard addition of biocides as a soluble preservative into 
the lubricant system is usually effective as an avoidance strat- 
egy, but it will have a short useful life in hot oil, tending to 
migrate from the oil phase to the water phase. These difficul- 
ties and differences in plant treatment systems, types of 
lubricating oils, operating temperatures and complex additive 
packages in the lubricant, control the use of an oil soluble 
preservative. This has been identified by some lubricating oil 
suppliers and they now include soluble chemical biocides 
within some of their product ranges. 


4.1.2.3 Water Preservatives 


Fuel insoluble anti-microbial chemicals can be introduced to 
the tank top in water soluble sachets or injected into the tank 
bottom. These chemicals should be amenable to simple 
concentration monitoring and detoxification before drain 
water disposal. There should be no biocide carry over from 
adjacent tanks or tank to engine. Addition of a water preser- 
vative to the engine cooling system must adhere to safety 
standards in the use of that chemical, if the cooling water is 
used for producing potable water for onboard consumption. 


4.2 Elimination 


4.2.1 Physical Decontamination 


Microorganisms do not die naturally — they must be killed. 
Once microbial infection is established onboard it may be 
combatted by physical treatment methods e.g. heat and/or by 
the use of biocides. Dead organisms will still plug filters and 
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supplementary filtration may be advisable to remove them, 
as shown in Figure 4.1. 


Settling: Since microbes are denser (specific gravity 1.05 gcm®) 
than distillate fuels and lubricants, they will gravitate towards 
the bottom over a period of time; the larger the microbial 
aggregation, the quicker the settlement. Microbial polymers 
and debris also settle out, although there have been cases 
where this has not happened, for example when there is 
entrained gas. Clean oil can thus be drawn from the top of 
tanks after settling, as shown in Figure 4.2. 


Centrifuges and Cyclones: These remove considerable micro- 
bial fouling. The centrifugal forces generated in a purifier are 
sufficient to spin out heavier microorganisms. The rate at 
which they separate out is affected by their degree of aggre- 
gation, the viscosity of the oil and the retention time. There is 
obviously a delicate balance involved in optimising condi- 
tions, as an increase in retention time will increase microbial 
removal, but it will also reduce the volume of oil treated, as 
shown in Figure 4.3. 


Filtration: As most individual microbes have a cell size of only 
a few um and some are even less than 1 jum, effective removal 
by filtration can be accomplished successfully using a series 
of appropriate filters, even if the filter pore sizes are far greater 
than the size of the microbes. Flow rates of 100-250 m’ per hour 
using 5 ym filtration, should be adequate for a clean-up in 
most cases, as shown in Figure 4.4. 


Heat: Heat processes have two variables, temperature and 
time of application. As an indication of actual practice, milk 
can be pasteurised at 71.7°C for 15 seconds or 62.8°C for 
30 minutes. This does not sterilise the milk but considerably 
reduces the microbial population. Microbes which flourish at 
high temperature are more difficult to kill by heat. Hence, 
microbes in engine lubricants and coolants can be expected to 
be less sensitive to heat treatment than organisms in cool 
systems. Microbes are also known to have different sensitiv- 
ities when suspended in the water phase and oil phase. We 
can expect purifier heaters and renovating tanks to reduce 
microbial populations in engine lubricating oil if batch heat 
sterilisation is carried out in the renovating tank. It is impor- 
tant to clean and sterilise the sump and system before 
returning the sterilised oil. The purifier heater plays a signif- 


Figure 4.2 
Contaminated fuel oil after being allowed to settle 


Figure 4.3 
Slime formation collected from the purifier bowl 
indicating mixed microbes 


icant role in continuously killing microbes passing through it 
and the overall effectiveness can be confirmed by onboard 
tests, as shown in Figure 4.5. 

In any system there are likely to be permanent tempera- 
ture gradients and different populations of microbes may be 
more active in different parts of the system, according to their 
temperature optima. Although heat in excess of 70°C and for 
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Figure 4.4 
Microbes being trapped by small filter pore sizes 


20 seconds will kill spoilage microbes, it is difficult to achieve 
this temperature on tank surfaces, either by very hot washes 
or steam lances. The efficacy is usually disappointing as heat 
losses across metal surfaces are so rapid that biofilms remain 
intact. 


4.2.2 Chemical Decontamination 


Killing microbes by chemical means is not difficult, but it has 
been proven that it is hazardous to attempt to do so unless it 
is known that the biocide is chemically compatible with the 
fuel and lubricating oil in use, does not affect its physical prop- 
erties (particularly demulsification), and has no other 
unacceptable adverse effects. 

Oil biocides should not be used without prior discussion 
with the fuel and lubricating oil supplier or an experienced 
consultant. These biocides have a finite life, being expendable 
either due to absorption by the microbes they kill, or leaching 
from the oil into the water phase. The wetter the conditions, 
the more rapidly they will be depleted. 

Whilst the use of the wrong biocide can have disastrous 
effects, even the correct biocide must be used carefully and at 
the right concentration. Underdosing will not cure the prob- 
lem and overdosing can pose a health hazard to the crew due 
to toxic vapours. 
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Figure 4.5 
Heat treatment of viable microbes 


There are obvious requirements for a biocide to be effec- 
tive. Whilst killing the organisms and _ suppressing 
re-infection, the treatment must not affect the quality of the 
fuel, degrade lubricating oils or be corrosive to metals in the 
system. Suitable biocides in almost all cases will be soluble in 
water. 

The most effective biocide is usually a blend of toxicants 
which destroys a wide range of microbiological species, acting 
efficiently on the tank bottom area as well as at the water inter- 
face. It should also contain dispersing or sludge solubilising 
agents which will gradually remove deposit accumulations 
and enhance the fuel flux characteristics throughout the 
system. 


Fuel Oil-Decontamination of Lightly Contaminated 
Systems: Many fuel systems are operated successfully using 
intermittent chemical decontamination with fuel biocides, as 
part of routine microbiological monitoring against predeter- 
mined limit values. These limits prevent serious fouling or 
malfunction and enable the fuel to still be used after decon- 
tamination. It can be argued that this strategy is easier and 
cheaper to operate than preservation. There are two basic 
elements in decontamination, i.e. destroying microbes and 
cleaning surfaces. 

Effective fuel biocides utilise oxazolidines or morpholines 
as active ingredients. Concentrations of 500-1000 ppm are 
usually appropriate with a contact time of 6-12 hours. Slightly 
lower concentrations are said to be suitable for longer term 
preservation. After the addition of the biocide to the fuel this 
is circulated through all parts of the system. 

In most cases, effective killing is accompanied by detach- 
ment of biofilms, such that dead and moribund microbes foul 
the fuel and must be removed if the fuel is to be used. 
Centrifuges and filters are usually employed for this and the 
final filtration stage using a filter rated at 20-50 um, would 
substantially remove microbial aggregates. 


Fuel Oil-Decontamination of Heavily Contaminated 
Systems: Chemical decontamination of heavily fouled fuel 
systems is really a modification of the proceeding section. 
Here however, the biocide will be needed in the fuel ata higher 
concentration and the fuel phase will probably be unusable. 
In the worst case pumping out the treated fuel will not be suffi- 
cient; the empty tanks will require further cleaning and 
de-sludging. The fouled fuel may only be suitable for down- 
grading or re-refining. 

The use of biocides is an acceptable method of treatment. 
As soon as microbiological fouling of fuel oil is observed or 
suspected, shock dosing with a biocide is essential. This 
should be followed by extensive mechanical cleaning and the 
use of disinfectants if the contamination is heavy. After chem- 
ical treatment, filters will require frequent cleaning until the 
established network of microbial biomass and remains has 
been removed from the system. 

It should be remembered that the action of the biocide in 
killing the microorganisms will allow them to settle at the 
bottom of the tank and gradually build up as sediment. During 
heavy weather the sediment can often be distributed resulting 
in blocked fuel lines and filters, thus possibly endangering the 
safe operation of the ship. 


Lubricating Oil-Decontamination of Lightly Contaminated 
Systems: Within lubricants, a more complete and elaborate 
array of additives is being employed, with the consequence 
that more of the required trace elements may be freely avail- 
able for microorganism proliferation. This may be 
counteracted, and already isin some cases, by specific biocides 
or metals which exert an inhibitory effect upon growth. 


Lloyd's Register Technical Association 


9:7 


Biocides cannot make an oil ‘better’, 
from getting worse. 

Rectification of lubricating oil is possible if the lubricant 
is passed through centrifuges and simultaneously heated 
above 70°C, so killing and removing microorganisms at a 
faster rate than they can incubate and grow. If this fails to elim- 
inate and/or contain the contamination, the centrifugal 
heating period should then be supplemented by treating all 
the lubricant with biocide and afterwards manually cleaning 
all the machinery surfaces. After treatment, the oil should be 
confirmed as suitable for use prior to running the engine. 
Continued monitoring should be implemented to identify any 
re-infection. 


they merely prevent it 


Lubricating Oil-Decontamination of Heavily Contaminated 
Systems: If re-infection returns, the previously treated oil 
should be flushed out of the system, manually and chemically 
cleaned and finally replaced with an entirely new charge. 
Professional advice should be sought as to the cause of this 
re-infection, as shown in Figure 4.6. 


Figure 4.6 
Gearbox system which continued to be re-infected 
until manually cleaned 


Cooling Water: Once microbial contamination is established, 
the infection will not be eliminated unless a chemical biocide 
is used. The choice of biocide is an important consideration, 
as many biocides are deactivated at high temperatures, partic- 
ularly when in the presence of certain anti-corrosion additives. 
If the cooling water is used for the distillation of onboard 
water, it is not permissible to add toxic substances to the 

system. Thus there should not be an on-going preventative 
biocide dosing regime. Biocides can however be used to 
decontaminate a cooling system on a ‘shock dose, circulate 
and discharge to waste’ basis. Any biocide used must be water 
soluble and have a fast action of 12 to 24 hours. However, if 
the cooling water is not used for distillation, biocides can be 
routinely dosed to avoid microbial spoilage. 


Bilge: Treatment with biocides is typically very cost-effective, 
especially when compared with the potential costs of micro- 
bial damage. 

The problem is not always immediately addressed by all 
types of biocides. As previously discussed, the SRB strain 
Desulfotomaculum has the ability to produce spores resistant 
to air and a variety of biocides. In general, the effectiveness of 
biocides is only assured if they are carefully selected to combat 
particular infecting strains, being monitored and replenished 
as necessary. 


Prompted by regular testing, and on the assumption that 
ahighrisk situation exists, a variety of strategies can be consid- 
ered and implemented. 


1. Commercial detergent hypochlorite bleaches are usually 
successful. Their concentration is readily monitored in- 
use and they can be deactivated after a suitable contact 
time by the addition of sodium thiosulphate. At alkaline 
pH, hypochlorite destroys the structure of biofilm, but its 
anti-microbial power is poor. An acid addition later in the 
decontamination procedure will enhance the microbial 
cull in the now ruptured biofilm. Alternatively, hypo- 
bromite can be used as it is both disruptive and lethal at 
high pH. 
Use a broad spectrum persistent biocide continuously to 
kill or suppress bacteria (including SRB) yeasts and 
moulds. The correct biocide choice is important. Broad 
spectrum biocides are likely to be toxic both to man and 
the environment. Their effective life is finite (it may be 
days or weeks) and some biocide concentration monitor- 
ing will be needed to plan a biocide top-up regime. Before 
disposal in discharged bilge, biocides may require deac- 
tivation. However, some biocides have a minor 
environmental impact and dilution before discharge (e.g. 
in ‘grey’ waste water) or simply a slow discharge into an 
infinite volume of seawater may be acceptable. There is a 
precedent for this as biocides are widely used to prevent 
biological fouling in seawater cooling systems. Measured 
biocidal additions will be needed for all sections of the 
bilges at risk. This may be physically impractical although 
there are some tablet or ‘stick’ biocides which ease this 
problem. Whatever type is used, the biocide must disperse 
throughout the bilge sections to be effective. A biocide 
regime will only be effective following cleaning /sterilisa- 
tion and ensuring an adequate dose is continually added 
to maintain levels. 

3. Use a narrow spectrum biocide active only against SRB. 
Toxicity to man and the environment is low; persistence 
is good. 

4. Pump bilges frequently into a bilge slop tank. A biocide 
is not added to individual bilge sections, but only to the 
slop tank. There is some merit in this approach as it mimics 
the situation before restrictions on bilge pumping were 
introduced. However, some ships have design features 
which ensure that significant volumes of stagnant bilge 
are never removed and have ultimately suffered dramatic 
hull perforation. For these ships anti-microbial chemicals 
are required. 

5. Add alkaline corrosion inhibitors to all sections of bilge to 
maintain a value above pH 8.5 which is easily monitored 
onboard. This will suppress SRB but not other bacteria. 

6. Oxygenate the bilges regularly, for example with hydro- 
gen peroxide. 

7. Add nitrate to all sections of the bilge to reduce the amount 
of corrosive sulphides produced. Nitrate is a preferred 
food to sulphate for SRB and its reduction yields mostly 
nitrogen gas and ammonia but not corrosive sulphates. 
This strategy has not yet been tried on ships as there is a 
downside which could be disastrous; once the nitrate has 
been used up, the SRB may renew their corrosive attack 
even more vigorously. Careful monitoring and control 
would be essential. 


N 


Ballast: Identification of SRB infection is evidenced by severe 
crevice pitting and accelerated corrosion between inspections. 
The presence of black slimes and sludges (or are black when 
scraped) and the potent odour of hydrogen sulphide, would 
confirm that a hazardous microbial consortium is present. 
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Effective treatment would require that the bottom plates 
to be cleaned and any rust manually removed to expose the 
bare steel. A biocide should always be applied to kill any 
viable microbial presence within these crevices. It is important 
that upon completion of this pre-treatment a suitable paint 
coating is applied. 


Distillate-Decontamination of Heavily Contaminated 
Cargoes: The procedure for adding a chemical biocide will not 
be cost effective if very large volumes of fuel are involved. The 
more appropriate strategy here would instead be, to pump 
out the fuel and decontaminate the empty system using water 
and detergent sterilisers. Choice of such agents is theoretically 
wide, but in practice, cargo contamination can be experienced 
where the local supermarket may be the only quick source of 
supply. If the problem arises onboard, the cost of delaying the 
ship will be high — whatever is available locally must be 
utilised as an interim solution. Professional onboard supervi- 
sion may be the best ongoing guarantee of success. 

There is no magic chemical formula which quickly and 
effectively works in all circumstances. As a general and obvi- 
ous rule of thumb, heavy infestations require more biocide. 
Beyond this, the decontaminating aqueous solution should 
have the following characteristics: 


A broad spectrum of anti-microbial activity; 

Fast acting; a 99.9% kill rate in the time allotted, less than 
12 hours is a reasonable target; 

3. Penetrate and disperse the biofilm; 

4. Emulsify and disperse residual fuel; 

5. Be unaffected by seawater if this is the diluent; 

6 
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Be amenable to rapid onsite concentration monitoring; 
Chemically formulated to enable neutralisation or, if not, 
be suitable for disposal without treatment; 

8. Ensure it is safe in use; 

9. Produce controllable foam; 

10. Market available worldwide. 


This is a daunting list of properties and few chemical 
suppliers have seriously addressed them all. 

Only three relevant groups of biocides can currently be 
simply monitored onboard, namely halogen-based chlorine, 
phenols and formaldehyde releasers. All are absorbed and 
depleted in use and must be topped-up, possibly on an hourly 
basis, to sustain their activity. For example, hypochlorite is a 
convenient source of chlorine; when formulated with wetting 
agents and dispersants, it is readily available under various 
trade names and concentrations in the domestic and industrial 
markets. It meets most of the requirements listed above; moni- 
toring free chlorine concentration needs care but the 
procedure is quick and the result can be immediately acted 
upon by topping up with more formulated hypochlorite. 
Whilst more than 50 ppm available chlorine can be aggressive 
to metals, less than 20 ppm is undesirable if a rapid penetration 
and kill is sought. It is not difficult to adjust between these 
concentrations, but substantial depletion of available chlorine 
must be anticipated. Chlorination is not effective at alkaline 
pH and acidification with hydrochloric acid may be needed. 
Alternatively, sodium bromide may be added as this increases 
efficacy under alkaline conditions. At the end of the proce- 
dure, residual chlorine can be deactivated with a quantity of 
sodium thiosulphate pentahydrate which is readily available. 
Excess thiosulphate is undesirable as it exhibits a high chem- 
ical oxygen demand. Manual cleaning and de-sludging could 
be necessary before or after biocide treatment. A final wash 
with clean water should then return the tank to service. 


4.3 Alternative Strategies 


There are a number of alternative strategies to the traditional 
biocidal treatment of contaminated systems. As with the 
methods for detection of microorganisms, many techniques 
have been adapted from other industries and are still at the 
research and development stage. They include: 


U.V. radiation; 

Gamma and x-radiation; 
Ultrasound; 

Microwave energy; 
Continuous pasteurisation; 
Heat control. 


These processes were reviewed at a meeting of the Insti- 
tute of Petroleum in 1985. Each treatment method has its 
advantages but none has been adopted commercially. The 
disadvantages of using radiation mean that large and techni- 
cally complex plants are required for this type of treatment. 
Similarly with heat processes, the dissipation of heat energy 
after treatment is a major problem which requires capital 
investment for cooling facilities. 
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5. HEALTH CONSIDERATIONS 


5.1 Microbial Hazards 


Microorganisms are included as ‘substances hazardous to 
health’ in the UK ‘Control of Substances Hazardous to Health 
Regulations’ (COSHH), 1988. It would be prudent to comply 
with these regulations. 

Conventional pathogenic (disease producing) microbes 
are not normally found in fuel and lubricants but two oppor- 
tunistic pathogens, the bacteria Pseudomonas aeruginosa and 
mould Aspergillus fumigatus are sometimes detected. These are 
common spoilage microorganisms with a potential for caus- 
ing clinical infections in susceptible individuals. The most 
likely route into the body is via inhalation as an aerosol 
spray /mist. In addition, most spoilage bacteria contain endo- 
toxins, which when inhaled as an aerosol can give rise to 
flu-like symptoms. 

Of far more concern, is hydrogen sulphide, emanating 
from SRB in tank and bilge water bottoms after extended stor- 
age and stagnation. This is a lethal gas which is more toxic 
than hydrogen cyanide. Typical hazardous concentrations in 
air are indicated in the Figure 5.1. 


Offensive odour. 

Injuries to eyes, respiratory tract, dizziness. 
Loss of sense of smell. 

Life threatening. 

Rapidly lethal. 


3-50 ppm 
50-300 ppm 
100 ppm 


300 ppm 
700 ppm 


Figure 5.1 
Hazardous hydrogen sulphide concentrations in air 


The danger associated with hydrogen sulphide is that a 
false sense of security is experienced, as it anaesthetizes the 
sensory organs and the characteristic offensive odour gradu- 
ally disappears. 


5.2 Risk Assessment and Risk Avoidance 


Hazards can exist without significant risk to health. Aerosol 
spray droplets below 5 ym in diameter are inhalable but if fine 
aerosol formation is avoided, there is virtually no risk. Such 
aerosol formation is most likely to occur during tank cleaning 
and approved masks should be worn. 

Small concentrations of hydrogen sulphide in a water 
phase equilibrate with very high concentrations in the air 
phase, rising to dangerous levels within enclosed spaces. At 
25°C, with a quantity of 2.5 ppm aqueous H,S concentration, 
this equilibrates with 700 ppm air concentration, which is 
rapidly lethal, as indicated in Figure 5.2. 


In Air HS ppm 


Aqueous H.S ppm 


A 10°C rise in temperature increases in air H.S ppm by 22% 


Figure 5.2 
Equilibrium of hydrogen sulphide in 
enclosed spaces at 25°C 


A simple strategy to minimise the risk is to add alkali to 
ensure an alkaline pH. Hydrogen sulphide and HS- ions are 
always in equilibrium according to pH as indicated in the 
Figure 5.3. 


HS” mg/l 


0.4 


Aqueous H.S mqg/! 


The HS’ ion is effectively non-toxic 


Figure 5.3 
Dissociation of hydrogen sulphide in 
water in relation to pH 


Dangerous accumulation of hydrogen sulphide within 
enclosed spaces should be avoided. If heavy infection is iden- 
tified, the use of a biocide should be applied. Ventilation is 
certainly not a guarantee of safety, as SRB will continue to 
generate hydrogen sulphide until they are killed — thus entry 
into a contaminated region is not advisable. 


5.3. Biocide Chemicals 


Biocides which are used to kill or suppress microbial growth 
are themselves toxic chemicals and COSHH assessments may 
regulate their use. They must be used judiciously, ensuring 
that the crews’ health and safety is not jeopardised. Also, they 
may be environmentally unacceptable. Their proper safe use 
should be in accordance to the Health and Safety material data 
sheets supplied by the manufacturer. If biocide treated bilge 
water is transferred to a sludge barge, the operator must be 
made aware that he is handling and disposing of a toxic chem- 
ical to ensure that the correct neutralising chemical is applied. 
Ships which pump chemical treated bilge water into the open 
sea will do so through an oil/ water separator. The effects on 
this equipment must be considered, to ensure that the 
discharge limit of 15 ppm is not exceeded. 


5.4 Test Kit Disposal 


Most onboard test kits employ a culturing incubation stage, 
whereby microorganisms from a sample are encouraged to 
replicate on a nutritive agar gel, in order to give a visible indi- 
cation of their presence. 

The hazard presented by microbial cultures is many times 
greater than the hazard posed by the same microbes when in 
the sample or system. Care should be taken to avoid direct 
contact with the cultured microorganisms. Before disposal, 
the cultures should be immersed ina strong disinfectant solu- 
tion for atleasta day. They may then be discarded with normal 
waste in accordance to the manufacturer’s instructions for the 
disposal of test kits safely. 
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6. CASUALTIES 


6.1 Human Casualties of Microbial Contamination 


Recreational, potable and process water including air condi- 
tioning systems are all able to nurture microorganisms, 
including Legionella. Awareness of those conditions which 
aggravate microbial contamination and growth and of the 
possible infection routes can suggest sensible control measures. 

The Merchant Shipping Notices M.1214, M.1215 and 1216 
highlights and introduces measures for designing, maintain- 
ing and disinfecting these systems. 


Microbial Contamination: Microorganisms can flourish and 
proliferate in dirty water, particularly when it is warm. In 
clean water, luxuriant growth is not possible but many 
microbes survive nonetheless and a few manage to reproduce 
slowly on scant nutrients — for example, trace nutrients 
remaining in distilled water. 

We now know that the organisms we find suspended in 
water are only a pale reflection of those really present in a 
water system, as the bulk of the microbial population is 
present in the films which cover all surfaces. On these surfaces, 
traces of nutrients are absorbed and aggregate, sustaining 
those passing microbes which settle there. 

A biofilm is built up comprising a mixed flora of interde- 
pendent species embedded in a matrix. This biofilm protects 
as well as nurtures microorganisms. Anti-microbial chemicals 
are usually many times less effective against biofilm organ- 
isms than against the same organisms in suspension. This is 
particularly so for chlorine, the traditional disinfectant for 
water systems. Fortunately, the true disease organisms are so 
adapted to the temperature and the nutrients of their animal 
host that they cannot proliferate in water systems; they may, 
however, survive sufficiently long to become a health hazard. 
The ‘opportunistic’ pathogens which can flourish in man or 
water are the ones to be identified. 

Microbial contamination of drinking water systems will 
cause an unpalatable taste and, at worst, an intestinal disease 
such as cholera or dysentery. Microbial contamination of 
swimming pools can result in skin infections. Colonisation of 
hot water systems introduces the risk of Legionnaire’s disease 
Legionella. Colonisation of water in air conditioning systems 
can lead to ‘Humidifier Fever’ or Bronchial Asthma. 

There is increasing public concern about health hazards 
from water systems and ‘The Approved Code of Practice’ 
ACOP, places responsibility on employers for ensuring that 
disease hazards are avoided. 


Microbial Fouling: As indicated, some degree of surface foul- 
ing is almost always present. In excess it becomes visible as 
slime. Less widely known is that severe microbial fouling can 
occur on Reverse Osmosis (RO) membranes. The RO supplier 
should proffer decontamination advice depending upon the 
chemical structure of the membrane. Preference is shown for 
0.25%-wt.content hydrogen peroxide because it is safe in 
drinking water systems and reacts with microbial enzymes, 
generating oxygen which lifts and disrupts the fouling layer. 
Carbon filters are sometimes used to remove water contami- 
nants which offend taste. Unfortunately, in doing so, they 
concentrate nutrients for bacteria and these (including some 
harmful ones) can survive and even proliferate. Chemical 
decontamination is extremely difficult as anti-microbial 
agents are themselves absorbed or deactivated. Steam or very 
hot water decontamination is feasible if the device is struc- 
turally thermo-stable. 

Simple filters entrain organisms which may then prolifer- 
ate. Some modern filter materials incorporate silver as an 


insitu anti-microbial agent. If decontamination is not possible, 
frequent renewal is advisable. 


Health Hazards from Water: Microorganisms in water can 
enter the human body by three routes: 


1. Via the digestive tract: contaminated water is a particular 
hazard as it passes quickly through the hostile environ- 
ment of the stomach and at the same time dilutes the acid 
there, thus reducing its anti-microbial properties. 

2. Via cuts and abrasions — hence microbes which are not 
normally invasive can cross the impermeable barrier of 
the skin. 

3. Via airborne droplets: only very small droplets (54m and 
less) can penetrate into the respiratory system and cause 
infection of the terminal air passage and air sacs. All of 
these routes are available on a ship. 


Legionella bacteria which causes Legionnaire’s disease, 
have been identified in water onboard ships. All water 
systems should thus be considered as possible microbial 
niches and potential hazards, and specific risks should be 
assessed. 


Legionella: Legionella is the name given to a genus of bacteria 
of which Legionella pneumophila is one species. It is commonly 
associated with disease outbreaks and apparently is the most 
pathogenic of the genus. To date, at least 34 different species 
of Legionella are recognised. This bacterium is common to 
natural water systems such as rivers, ponds and even wet soil, 
but unfortunately has now found a new environment in man- 
made water systems, as these provide particularly suitable 
conditions for growth. Its appearance is rod-shape and growth 
occurs between 25-45°C with particularly rapid growth at 
about 36°C, feeding on the by-products of slime-forming 
microbes. Hence, any situation which is warm and contami- 
nated with microbial slimes could encourage the proliferation 
of Legionella. It is easily killed in water because it succumbs 
readily to heat and most disinfectants, provided it is not 
encased in biofilm. A few Legionella bacteria are likely to be 
detected in most warm, slimy locations, increasing with popu- 
lation. Legionella is an ‘opportunistic’ pathogen — that is, it can 
only invade a susceptible host and thus, only a potential 
hazard. 

To infect such a host the water containing Legionella must 
be vaporized (to 5um droplets or smaller) and inhaled in 
considerable numbers. Its detection in small numbers in water 
is not necessarily a severe health hazard. It would probably 
be found in half the man-made water systems tested and its 
presence must be viewed in the light of the likely risk. A water 
system, which is warm and contains slime, produces a fine 
aerosol and directs this at a susceptible host, is a high potential 
risk. There is no person-to-person transmission and most 
investigations have implicated warm showers or cooling 
water spray radiators. It is probably not a new disease, but 
rather a form of pneumonia which may have previously been 
attributed to other causes. Although there are test methods 
available for Legionella organisms, it is more practicable 
simply to aim at suppressing development of all microbial 
slimes, keeping systems free of organic fouling. Direct testing 
is justified if incidences of disease arise or if a particular high 
risk situation is identified. 


6.1.1 Drinking Water 


Fortunately, the rigid standards for water treatment, distribu- 
tionand storage have largely eliminated the risk of contracting 
the various enteric diseases which could be disseminated by 
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contaminated water. No distinction is now made between the 
chemical treatment of water taken by barge or shore main and 
water produced onboard. 

The latter is frequently generated by a low pressure evap- 
orator which can be heated by steam or engine cooling water. 
The temperature of the former is high enough to guarantee 
that, even if the brine is contaminated with microorganisms, 
they will not survive in the distillate. Evaporators heated by 
water run at much lower temperatures, possibly as low as 
35°C, but evidence suggests that provided the brine strength 
is 24%-wt.content, there will be no carry over of living bacteria 
into the distillate. 

To minimise the risk of contamination originating from 
the brine, it is recommended that the evaporator is only oper- 
ated when at least 20 miles from land, even further if there is 
arisk of esturial pollution. There is potential for contamination 
by direct leakage from the engine cooling water as this 
frequently contains very large numbers of bacteria. 

Reverse Osmosis is an alternative method of generating 
fresh water. The membranes may accumulate microbial 
slimes, but the membrane pore size is small enough to prevent 
their passage if the integrity of the structure is perfect. 

Water produced or taken onboard must be ‘sterilised’ for 
use as fresh water. The only treatment now approved by 
Notice M.1214 is chlorination. It should be remembered that 
chlorination is only effective at the correct dosing rate, indi- 
cated by Notice M.1216 (0.2 ppm residual). There have been 
cases where lesser concentrations have failed to kill microbial 
spores when entrained in biofilms. 


6.1.2 Domestic Water 


It has already been mentioned that shower heads have been 
found to harbour Legionella within slime residues. Accommo- 
dation regulations propose a shower water temperature of 
35-41°C and it will be seen that this range is particularly stim- 
ulatory to Legionella. It is readily killed by heat, and routine 
flushing out with very hot water is a simple control measure. 
A sensible strategy is to have ring main systems for both hot 
and cold water supplies to prevent the formation of stagnant 
warm zones, ensuring that hot water is circulated in a ring 
main at 60°C. The correct maintenance of equipment and 
fittings is important, and shower heads and tubes should be 
super-chlorinated every three months. 

Shower drains should be regularly disinfected, as an 
aerosol of the drain contents can be formed when a spray of 
water impinges there. 

Since Legionella are known to accumulate in the lower, 
cooler part of calorifiers, they should be decontaminated regu- 
larly by raising the temperature to 70°C for one hour. Cold 
water systems should be kept as cool as possible to discourage 
any growth. 

Air humidifiers in which air is directed through a curtain 
of water droplets are lush environments for microbial growth. 
Although they are rarely (and arguably) a source of Legionella 
the inhalation of microbe carrying water droplets from 
humidifiers can give rise to flu-like ‘Humidifier Fever’. It is 
not a true infection and if the source of the droplets (the water 
recirculating in the humidifier) is cleaned out and disinfected, 
the symptoms of the sufferers disappear. 

Problems associated with domestic water systems are 
addressed in Notice M.1214. 


Swimming Pools: A form of skin granuloma has been asso- 
ciated with swimming pools for many years. The bacterium 
Mycobacterium marinum enters the body through cuts and 
abrasions in the skin. It has some resistance to chlorine and 
can survive very well on rough and broken tiles. 


Many bacteria from the bathers, particularly skin and 
faecal organisms, can be found in swimming pools and 
present a hazard. Sweat and urine pollute the water and stim- 
ulate these organisms, whilst rendering many disinfectants 
inactive. Hence a range of disinfectants based upon chlorine, 
iodine and bromine are used in swimming pools, at concen- 
trations high enough to kill body originating organisms 
within one minute. Chlorine-release chemicals such as isocya- 
nurates are frequently used but are not suitable for potable 
water. Athlete’s foot (a fungal skin infection) and certain kinds 
of warts can be acquired from floor areas around pools: regular 
cleaning and disinfection are essential. 


Jacuzzis and Whirlpools: The potential hazard is much 
increased as many people occupy a small volume of water 
held at just above body temperature, usually 38-40°C. There 
are many recorded instances of skin infection associated with 
these pools, usually caused by Pseudomonas aeruginosa, but 
more recently attributable to Legionella pneumophila. Chlorine 
treatment of whirlpools is often ineffective due to the heavy 
organic and bacterial load and to its volatility at this temper- 
ature. Bromine-based disinfectants have found favour, but 
over-dosing can cause skin rashes. 


6.1.3 Air Conditioning 


Notice M.1215 particularly addresses the potential hazard 
from Legionella in air conditioning systems and emphasises 
the need to prevent the accumulation of fouling in filters, 
drains, etc, and for disinfection at intervals of not less than 
three months. 

Fortunately, most disinfectants will kill Legionella bacteria 
and it is most important that the product penetrates slimes 
and organic deposits and is safe to use. 

Chlorination is especially suitable, but it should be noted 
that chlorine is easily deactivated by gross organic contami- 
nation and is not very effective under alkaline conditions. 

A three-monthly interval between disinfection regimes is 
suitable but outbreaks have occurred where such infrequent 
chlorination has been inadequate. Sensible cleaning and disin- 
fection programmes for systems at risk should have their 
frequency guided by observable results. 

Such measures should aim to keep the total numbers of 
microbes below 105 per ml of water and a simple on-site 
device, a dip-slide, can monitor this. It is doubtful, however, 
whether such monitoring is successful on ships, as there is no 
universal agreement on what constitutes an acceptable level 
of contamination. 

Pools of contaminated water lying in air condition ducts 
have been recently implicated in a Legionella outbreak. Disin- 
fection of duct-work can be achieved by a ‘fogging’ 
disinfectant, but should only be attempted with expert help. 


Risk Assessment and Hazard Avoidance: The characteristics 
of Legionella bacteria already outlined suggest the salient 
factors in risk assessment and conversely the strategies for 
hazard avoidance. Obvious factors in risk assessment are time 
and intensity of exposure. A shower has short but concen- 
trated exposure, a spa longer but less intense exposure, and 
conditioned air presents dilute concentrations for much of the 
day. Hazard avoidance is largely a matter of negating those 
factors which stimulate Legionella. 

It is not of course possible to banish high risk passengers 
or crew — an ideal avoidance procedure, but everyone should 
be aware of the heightened need for extra vigilance. Principles 
of avoidance to be employed can be summarised and used as 
a checklist for good housekeeping practice, as shown in 
Figure 6.1. 
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Avoid stagnation in water systems. 

1.1. Disconnect redundant piping, wash-basins, 
showers etc. 
Circulate on a ring main to avoid stagnation in 
infrequently used installations, particularly showers. 
Connect multiple storage tanks in series, not parallel. 


Keep cold water supplies as cool and clean as 
possible substantially below 20°C. 


2.1 Locate the storage tanks in a cool place if possible. 
Ventilate this location. 

2.2. If filters are installed, clean and disinfect not less 
than monthly. 

2.3 Insulate cold pipes running through warm locations 
eg, alongside a hot pipe. 

2.4 Superchlorinate system at six monthly intervals and 
after re-fitting or dry docking. 


Reduce extraneous contamination. 


Secure proper lids on all storage tanks. 

Repair leaking pipes etc. 

Ensure that no back-flow can occur from dish- 
washers, washing machines etc. 


Keep hot-water systems hot and clean, but avoid 
scalding risks. 


Calorifiers should be thermostatically controlled at 
55-60°C. 
Hot water outlets should be above 46°C, if 
necessary provide trace heating. 
Showers should be self-draining if possible. 
Decontaminate calorifiers regularly by stopping 
water usage and setting the thermostat to 70°C 
(preferably 80°C) for several hours. Then run water 
out slowly through all outlets. 
Superchlorinate shower heads and tubes every 
three months. 

4.6 Disinfect shower drains regularly. 


Keep air-conditioning systems clean. 


5.1 Clean and disinfect filters, drains, etc, every three 
months. 

5.2 Provide air breaks for chiller battery drains. 

5.3 Provide inspection hatches to facilitate regular 
inspection of heat exchangers 

5.4 Keep recirculating water humidifiers scrupulously 
clean. 

5.5 Prevent water ponding in ductwork. If necessary 
disinfect ductwork by ‘fogging’. 


Keep fire-sprinkler systems clean. 


6.1. When refilling after discharge use chlorinated water. 
Workshop hazards 


7.1 Legionnaire’s disease has occurred from cutting 
fluid aerosols. Clean and disinfect systems regularly. 


Keep records of inspection, cleaning and 
maintenance. 


Figure 6.1 
Good housekeeping practice 


These principles should be adopted as part of a regular 
routine after bringing the system to an acceptable condition, 
paying particular attention to constructional materials. Many 
structural materials, if used in potable water or recreational 
water systems, can actually encourage growth of microbial 
slimes. Organisms from the slimes become suspended in the 
circulating water and hence contribute to the microbial ‘load’. 
The slimes themselves are mixtures of polymers in which the 
microbes are entrained, and many disinfectants fail to 
penetrate this complex. Fortunately, constructional materials 
have been extensively investigated and guidance on the 
choice of material is readily available. New ships must use 
approved material and existing ships must progressively 
replace unsuitable materials in drinking and washing water 
systems. 

A new or extended water system should be cleaned and 
disinfected before being brought into service. Superchlorina- 
tion to achieve a free residual of 50 ppm for 12 hrs, followed 
by thorough rinsing is a suitable procedure. 

It should not be forgotten that the act of cleaning contam- 
inated systems can be a hazard. There was an example where 
ten men contracted ‘Pontiac Fever’, a form of Legionnaire’s 
disease, after cleaning steam turbine condenser tubes. The 
requirementis to wear protective clothing, particularly masks, 
if there is a perceived risk, and disinfect before cleaning. There 
have been cases of disease, including Legionnaire’s disease, 
associated with water systems on ships. The risks are small 
but it is necessary to create awareness — as awareness stimu- 
lates the proper degree of care and prevention. 


6.1.4 Sewage Treatment 


The potential health hazards from toxic hydrogen sulphide 
sewage gases, generated by anaerobic bacteria (SRB) have 
been highlighted by a recent tragic incident ona ferry. (Notice 
M.1548). Good design and maintenance are advocated to 
avoid such occurrences. If there is reason to believe that the 
potential for such an incident is present, a number of control 
measures can be considered for preventing corrosion by SRB. 
Effective measures include; raising the pH above 8.0, 
adding hydrogen peroxide to react with hydrogen sulphide 
to form water and sulphur, or adding simple cheap biocides 
such as hyprochlorite or chlorine. The operational function of 
the air injectors, ensures that the conditions remain unsuitable 
for anaerobic bacteria. Ventilation of the gas space will also 
prevent corrosive accumulations of hydrogen sulphide gas. 


6.2 Marine Casualties of Microbial Contamination 


Case History No. 1. 


Reported Problem: Bilge Main Pipework Corrosion 
Microbial Presence: Sulphate Reducing Bacteria (SRB). 


Vessel: Cross Channel RoRo Passenger Vehicle Ferry 
Built: West Germany — 1987 +100A1 


Investigation by FACS 


This vessel was the first of two ferries built and suffered corro- 
sion of the bilge main pipework, which was not experienced 
by her sister vessel. 

The bilge system comprised of a bilge main, connecting 
all spaces from the aft steering space through main and auxil- 
iary machinery spaces, void spaces and forward machinery 
spaces. In addition, an oily bilge system was provided in the 
main and auxiliary machinery spaces. The bilge main system 
was not regularly used and was primarily only tested weekly 
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as part of the vessel’s routine maintenance and for re-certifi- 
cation purposes annually. 

Corrosion in the bilge main pipework first came to the 
attention of vessel's staff in 1991, the pipework being fully 
welded throughout. The problem first manifested itself as a 
loss of suction due to perforations in the pipewall during 
routine testing, as shown in Figure 6.2. 


Figure 6.2 
Bilge main perforations of pipewalls due to SRB corrosion 


This prompted renewal of 20% of the bilge main system at 
the vessel’s annual survey and dry docking in early 1992. Any 
remaining pipework was renewed at the next annual survey 
and drydocking in early 1993, where it was noted that corro- 
sion was evident in pipework that had been renewed in 1992. 
Total costs of this renewal programme amounted to £95,000. 

Vessel’s staff are required to maintain machinery spaces 
toa high standard of cleanliness; leaks and spills are thus kept 
to a minimum and bilges do not require regular pumping. 
Unfortunately, bilge pipe work is liable to become stagnant 
without pumping, leading to a consequential risk of microbi- 
ological corrosion. 

Since only one of the two vessels had suffered this corro- 
sion problem, onboard procedures were reviewed. The reason 
was mainly due to the fact that the sister vessel's staff tested 
the bilge main by flooding and pumping the system through 
with fresh water. This testing principle has now been adopted 
and although there is a periodic odour of hydrogen sulphide 
present, the incidences of corrosion appear to have abated. 


Evaluation 


Implementation of onboard procedures to prevent further 
stagnation of water in the bilge main pipework, has prevented 
further SRB corrosion problems. 


Case History No. 2. 
Reported Problem: Ballast Tank Corrosion. 


Microbial Presence: Sulphate Reducing Bacteria (SRB) 


Vessel: Cross Channel RoRo Passenger Vehicle Ferry 
Built: Denmark — 1976 +100A1 


Investigation by FACS 


The vessel suffered corrosion in the double bottom ballast 
tanks after it was lengthened in 1986, and the tanks newly 
painted. 


Three of the six ballast tanks affected were situated amid- 
ship. These tanks were not regularly used, remaining empty 
and closed between refits. Corrosion of the ballast tanks was 
first noticed by the vessel's staff in 1986, shortly after the ship 
returned to service. 

During ballasting, polluted water containing effluent 
discharged from a fish meal factory close to the repair berth, 
was pumped onboard. Corrosion had been further exacer- 
bated by water ingress through the Winner ball valves with 
defective seals. 

An ongoing replacement programme to remedy the leak- 
ing valves is being carried out during annual refits. The 
corrosion and deep pitting damage, which consisted of pits 
up to 10 mm in diameter, has led to ongoing weld repairs to 
the steel work, costing some £8,000 per year. 


Figure 6.3 
Ballast tank corrosion by SRB due to fish oil 
protection coating before cleaning 


Figure 6.4 
Ballast tank corrosion indicating extent of 
steel wastage after cleaning 
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The reason for the acceleration in corrosion is due to the 
fish oil coating the newly painted tanks. Since SRB are depen- 
dent upon an oxygen depleted environment, the oil film 
barrier effectively accommodated this requirement. Aerobic 
bacteria in the polluted water, being adequately sustained by 
the nutrients from the oil, penetrated the oil film barrier which, 
in turn sealed behind them. Establishment of SRB between the 
paint and oil film barrier, prevented oxygen from entering and 
their acidic by-products dissolved the protective paint, expos- 
ing and corroding the underlying steel, as shown in Figure 6.3. 


Evaluation 


Application ofa cleaning degreasant to remove any remaining 
oil film, followed by biocide dosing, should prevent further 
corrosion. This is dependent upon the degree of steel wastage, 
depth of pitting and rust scale, which should be removed to 
expose the SRB to the biocide, as shown in Figure 6.4. 


Case History No. 3. 


Reported Problem: Gas Oil Cargo Contamination. 
Microbial Presence: Aerobic Bacteria, Yeasts and Moulds. 


Vessel: Product Tanker. 
Built : Sweden — 1975 +1A1 


Investigation by FACS 


The vessel had loaded a microbial contaminated gas oil cargo 
of 13,000 tons from the Baltic port of Ventspil in November 
1993: 

Routine testing of vessel’s cargo before discharge in 
Rotterdam confirmed the presence of severe microbial infec- 
tion. After the cargo was declared spoilt, it was subsequently 
discharged. Since the discharge, the vessel had implemented 
tank cleaning procedures with chemical dosing to eliminate 
the continued presence of microbial contamination, without 
success. 

Cargo samples received from the vessel enabled the types 
of microbes to be identified and the choice of biocide. The 
microbial count for bacteria, yeasts and moulds measured 
greater than 25,000 in a litre sample. Onboard assessment of 
the operating problems, tank layout, piping systems and the 
available stand-down period, allowed a tank decontamina- 
tion and time schedule programme to be planned and 
implemented, as shown in Figure 6.5 and Figure 6.6. 


Figure 6.5 
Viable microbial biofilms adhering to cargo tanks 
before biocide decontamination 


Figure 6.6 
Dead microbial biofilms floating on water 
after biocide decontamination 


Cold water, dosed with the correct biocide concentration, 
and circulated using the high pressure Butterworth system, 
at 1,4 and 8 metres from the tank tops, dislodged the adhered 
biomass films from the tank walls. Further soaking of each 
tank, ensured that the biocide kill time of 6 hours was 
achieved, such that the entire operation was completed in 48 
hours. Direct and indirect costs due to loading a contaminated 
cargo and decontaminating the vessel were in the order of 
£70,000, which exceeded the freight rate profit in carrying the 
tainted cargo. 


Evaluation 


Application of the correct biocide and strategies to eliminate 
the persistent microbial infection proved effective and a 
‘microbial free cargo tank’ report was awarded to the vessel. 
Until such a report was issued, the vessel was not acceptable 
to charterers. 


Case History No. 4. 


Reported Problem: Gas Oil Fuel Contamination. 
Microbial Presence: Aerobic Bacteria, Yeasts and Moulds. 


Vessel: Patrol Ship. 
Built: Denmark — 1960 +100A1. 


Investigation by FACS 


The vessel loaded gas oil bunkers from an Icelandic port in 
1994 and in accordance with their procedures, used one of the 
settling tanks to store the fuel, until a sample was analysed as 
being ‘fit for use’. 


Evaluation 


Analysis of the sample received indicated that the gas oil was 
unsuitable for service due to severe microbial infection, as 
shown in Figure 6.7. 

Had the vessel used the fuel, the spoilage material would 
have caused filter blockage. The vessel duly offloaded the 
fuel and implemented a cleaning and biocide treatment 
programme. In this instance, all costs were against the 
supplier. 
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Lubricant Quality Scan 
Telephone 081-681 4040 
Telex 8953603 LR LON G 
Fax 081-681 4056 


FUEL SAMPLE 


EQUIPMENT TYPE: MAIN ENGINE 
MANUFACTURER: B & W 
MODEL: 9 - 35VBF - 62 
FUEL GRADE: GAS OIL 


LQS/115770/RAS 
SETTLING TANK 


DRAIN LINE een sie ations 


DATE SAMPLED: 01.11.94 
DATE DISPATCHED: 
DISPATCHED FROM: 


4] MICROSCOPE EXAMINATION OF VISIBLE PARTICULATE DEBRIS 
a FUNGAL FRAGMENT COUNT 


BACTERIA, YEASTS, MOULDS & SULPHATE REDUCING BACTERIA (SRB) IN FUEL PHASE 
(MODIFIED IP385, EXCEPT FOR RESIDUAL FUELS WHICH USE AN EXTRACTANT METHOD) 
BACTERIA, YEASTS, MOULDS & SULPHATE REDUCING BACTERIA (SRB) IN WATER PHASE 


NO FREE WATER 
LARGE AMOUNTS - FINE DEBRIS 


MICROSCOPIC EXAMINATION: LARGE AMOUNTS - SMALL 
WATER DROPLETS AND 


GT. 10000 (c.i0*) 
GT. 10000 
GT. 10000 
GT. 10000 


D 
A= Suitable for further service B = Preventative action Required 
C = Remedial treatment required D = Unsuitable for fart i 


FUEL CONDITION: 

Fuel is unsuitable for further service. The analysis of this sample indicates very severe microbial infection and the 
spoiling material is likely to cause filter blocking. Purification is unlikely to resolve the problem. The presence of SRB 
is of particular concern and may be corrosive to fuel system components and fuel tanks. 

ACTION: 

We recommend the fuel is removed from the system and the tanks inspected, then manually cleaned to remove sludge, 
slime and sediment. After cleaning new fuel should be dosed with an appropriate fuel soluble biocide, then circulated 
around the 

Further samples should be taken after decontamination to identify any viable microbial presence. 


Date of Next Sample: Immcdiately afler decontamination. Report Date: 08.11.94 Nene 


Figure 6.7 
Severe microbial infection in loaded gas oil 
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7. TESTING FOR MICROBIAL PRESENCE 


In view of the current increase of widespread infection, there 
is a strong case for routine sampling and analytical tests to 
be carried out onboard and supported by a comprehensive 
laboratory report. 

The primary function of an onboard microbiological test 
is to provide an early warning to pre-empt microbial infesta- 
tion. It can also be used to verify microbiological activity and 
to demonstrate that the microorganisms involved are still 
viable. 

However, even within the same location, there will be 
variations in the types and number of microbes present at 
specific points. This can change with time due to changes in 
aeration, pH, temperature and nutrient availability. Insitu tests 
need therefore to be able to detect a wide variety of micro- 
organisms, identify them as being bacteria, yeasts or moulds 
and indicate particularly whether sulphate reducing bacteria 
(SRB) are present; all of this information should be expressed 
at least semi-quantitatively. At present there is no test which 
canachieve this and instead an informed choice must be made 
from the test kits which are available, in order to investigate 
any problems (or potential problems) and then monitor the 
efficiency of subsequent anti-microbial strategies. 

All insitu tests require an incubation period; this could be 
a matter of minutes for initiation or days to monitor microbial 
growth. The tests should be incubated either at or near the 
temperature of spoilage, or at the temperature prescribed for 
a particular test. 

Aerobic and anaerobic microbes are usually tested for 
separately. Facultative microbes are able to grow aerobically 


Total Bacterial Count Agar 


or anaerobically and will therefore be detected whether or not 
oxygen is present. 


7.1 Onboard Test Kits 


There are numerous types of onboard dip-slide test kits avail- 
able and they all identify the degree to which microbial 
contamination is present. They are usually only able to test 
aqueous samples and are of the following design: 

A small plastic paddle (approx. 2 x 5 cm), coated with a 
nutritive agar gel is dipped into an aqueous sample or the 
sample is applied to it. Some of the microbes adhere to the gel 
and reproduce during incubation to yield visible spots which 
are colonies. The pattern of spots is compared to a calibration 
chart and the initial number of microbes is read off the chart, 
as shown in Figure 7.1. 

It should be noted that the calibration and dip-slides have 
been designed for aqueous samples; the chart will give 
misleading information if the slide is dipped into or through 
fuel or lubricating oil. Sterile disposable 1 ml Pasteur pipettes 
can be used to access water below a fuel sample and apply it 
to a slide; the original calibration is then valid. 

Some nutritive agars are designed to grow bacteria, whilst 
others grow moulds and yeasts, but neither type do this exclu- 
sively. Some dip-slides will have different types of agar on 
opposite sides of the slide. 


Test for Bacteria: Most dip-slides for bacteria incorporate a 
dye which stains the bacterial colonies red. The slides are incu- 
bated ina warm room for 2-3 days and the result read without 
opening the container, as shown in Figure 7.2. 


Figure 7.1 
Bacteria, yeast and mould colonies on test kits 
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Figure 7.2 
Evaluating bacteria counts against calibration chart 


Typical numbers of colonies expected per ml sample are: 


Potable water 0 -10° 
Clean sea water 10°-10° 
Polluted water 10°-10* 
Lightly infected fuel in water bottom 10° 
Heavily infected fuel in water bottom 10°-10° 


Test for Moulds and Yeasts: Agars designed for yeasts and 
moulds will grow the former as round colonies, coloured 
white, cream or red. After incubation for 3-5 days under warm 
room conditions, the result is read from the calibration chart. 
Yeasts are usually less than those of bacteria. 

Typical numbers of colonies expected per ml sample are: 


Potable water 0 
Clean sea water 0-10° 
Polluted water 0-10? 
Lightly infected yeasts in fuel water bottom —_10°-10# 
Heavily infected yeasts in fuel water bottom —_10*-10° 


Moulds cannot be quantified in the same way as bacteria 
and yeasts; a single mould may be in the sample as a minute 
spore (not significant) or a ‘mat’ of proliferating strands. 
Incubation for yeasts is similar. Colonies are seen as large 
‘furry’ patches, usually cream, green or grey /brown in colour. 
Should any yeasts or moulds be detected, evidence of growth 
mats in the sample should be looked for. If in doubt, profes- 
sional help should be sought as the identity of the moulds is 
important. 

It should be noted that some agars designed for yeasts and 
moulds contain the dye Rose Bengal, which colours the 
colonies pink and masks their real colour. Rose Bengal is 
affected by undue exposure to light, after which it tends to 
suppress colony development. Thus, a slide should be 
checked with a sample known to contain yeasts or moulds 
(real ale or stale milk can be tried). 


Tests for SRB: These microbes grow only in the absence of 
oxygen and, therefore, an aqueous sample is pushed into an 
agar gel using a glass tube, a pipe cleaner, or is simply poured 
on top, as shown in Figure 7.3. 

The degree of infection is determined by the rate of devel- 
opment and intensity of a black coloration. All should be 
incubated in a warm room for up to 10 days. Any positive 
result should be viewed with concern as SRB plays a promi- 
nent role in accelerating corrosion of steel and yellow metals. 
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Figure 7.3 
SRB growth resulting in the formation of 
black iron sulphide 


Tests on Water-free Samples: There is no simple onboard test 
which can be used directly to detect microbes in the fuel and 
lubricating oil phase. Available tests rely upon extracting the 
organisms from the oil phase into an aqueous phase, which is 
then tested. Organisms in the fuel and lubricating oils are 
extracted into sterile water with a flocculant and then trans- 
ferred to an agar gel, which detects their presence by a colour 
change in 1-3 days. The extraction bottle, sterile transfer 
pipette, and sensitive gel are all supplied with the kit. Very 
slight contamination may not be detected, but more numerous 
organisms will induce increasing colour changes in the gel. 


Tests on Surfaces: Dip-slides can be pressed against tank 
surfaces and then incubated to obtain an indication of clean- 
liness. The calibration charts are irrelevant in strict terms of 
numbers, buta slide corresponding to 0-10’ on the chart would 
indicate a reasonably clean surface and one corresponding to 
>10°, a very dirty surface. This is a useful strategy to check the 
efficacy of a decontamination procedure. Surface guideline 
limits are shown in the Figure 7.4. 


Microbes Surface Condition 


Chart Reading 


Moderate 
Moderate/heavy 
Heavy 


Bacteria 


Yeasts Moderate/heavy 
Heavy 


Very heavy 


Moulds Interpret as per calibration chart 


Figure 7.4 
Surface guideline limits 


Most fuel infections involve bacteria, but in some cases 
the dominant organisms are yeasts and moulds. 


Vel Sampling Procedures 


The exact sampling point is important and affects the interpre- 
tation of any test. Most microbial growth will probably be at 
the oil / water interface and SRB are usually closely associated 
with steel surfaces, particularly the tank bottoms. These 


microbes, when in contact with surfaces will adhere as a 
biofilm. Comprehensive information should be recorded, 
including the temperature of the system sampled, precise 
sampling point and the recent history of the system. If samples 
are sent away for testing, they should be kept as cool as possible 
(but not frozen) and transported by the quickest practical route. 


Fuel Oil: 

When to sample bunkered fuel 

1. Routine analysis of bunkering provides evidence for 
claims against suppliers if problems are detected. 

2. Routine testing will allow detection of contaminated fuel 
at an early stage and allow appropriate remedial treat- 
ment, hopefully before operational problems occur and 
before transfer between tanks. 

3. Analysis of fuel bunkered at previously unused facilities, 
in areas where problems have been encountered, or at 
facilities known to have caused problems. 

4. Less frequent analysis of bunkerings from facilities previ- 
ously free of contamination should also be considered. A 
few samples giving negative results does not necessarily 
give a bunkering facility a clean bill of health. 

5. When operational problems are encountered, or onboard 
contamination is significant, samples should be made 
available for laboratory analysis. Collecting several sets of 
sealed samples by a reputable independent laboratory 
will aid consequent claims against the supplier. 


Where to sample bunkered fuel 

Microbial contamination in fuel tends to distribute heteroge- 
neously. It settles out towards the bottom, but may easily be 
re-distributed with fuel movements. 


1. A good sample is one containing water i.e. a drain sample 
from the storage tank, road tanker, barge. If water is recov- 
ered, a one hour test can be used enabling rapid detection 
of potential problems. Even if water is not recovered, a 
sample from the bottom of the supply tank is most likely 
to reveal contamination, although this sample will not be 
suitable for rapid analysis. Bottom samples from supply 
tanks will not represent overall contamination in 
bunkered fuel. Analysis of samples from higher layers 
may fail to detect a gross bottom contamination which 
could be re-suspended in upper fuel layers during bunker- 
ing and lead to subsequent operational problems. 
In addition to bottom samples, a sample which represents 
the bulk of bunkered fuel is advisable. If it is not possible 
tosample froma point prior to delivery onboard, a sample 
from the loading pipeline, hose or manifold is another 
option. Wherever possible, sample both at the beginning 
and end of bunkering. 

3. A sample from the ship’s bunker tanks or bunkering 
pipelines is a third, but less preferred option. Tests on this 
sample will not enable the source of contamination to be 
pin-pointed, since it will not reveal whether it originated 
from bunkered fuel, pipes or was present in the ship’s 
tanks prior to bunkering. Samples should not be taken 
from dead legs of loading pipework, as these are unlikely 
to be representative. Samples are only appropriate if they 
are taken from the actual batch bunkered and a single 
sample is rarely adequate. For example, a composite fuel 
sample indicates the quality of the fuel in use whilst a 
bottom sample is useful for predicting future problems. 


N 


When to sample onboard fuel 

Proliferation of microbial infection from low numbers to 
numbers likely to cause problems is not rapid, usually taking 
several months provided that free water is eliminated. 
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1. Forroutine monitoring, three monthly sampling of engine 

room tanks should be sufficient. 

If problems of water accumulation in engine room tanks 

are observed, ships are trading in warm climates or filter 

blocking problems are encountered, sampling rates 

should be stepped up. 

3. Ingeneral, main storage tanks need only be sampled every 
six months and miscellaneous tanks, auxiliary tanks, 
lifeboat tanks, require only annual sampling. 


N 


Where to sample onboard fuel 

1. Drain samples from daily service tanks and settling tanks 
will provide indications of any imminent operational 
problems. 


2. Forbunker tanks, use bottom sampling equipment; other- 
wise sample from delivery lines to engine room tanks or 
a centrifuge water discharge. 

Lubricating Oil: 


When to sample 

1. Before, after and during lay up. 

2. If operational problems or oil specification changes are 
detected. 

3. Routinely for slow speed diesel engines, usually at six 
monthly intervals, depending upon the ship’s history and 
purifier efficiency. 

4. When purchasing or chartering a ship. 


Where to sample 

1. Crankcase lubricant should be sampled from the sump 
bottom using water droplets taken from the sounding rod. 

2. Before the purifier heater and after the purifier. 

3. From a point supplying the engine. 

4. Renovating and storage tanks. 

5. Other systems and from the dead bottoms of tanks, where 
water and sediments can collect, as shown in Figure 7.5. 


Figure 7.5 
Storage tank contamination indicating biofilms 
and SRB pitting corrosion 


Bilges: 

When to sample 

Bilges should be tested routinely at three monthly intervals 
or more frequently. 


1. If bilges are held onboard for several weeks due to 
discharge regulations. 

For ships operating mainly inshore. Unusual operating 
conditions and periods of inactivity. 


nN 


3. Whenever accelerated corrosion is observed in bilges or Cooling Water: 
3 pipelines. When to sample 
4. Ifasulphide smell is noticed. Routinely, if the pH level reduces. 
If the system is being continuously filled due to leaks. 
Where to sample When the cooling water smells, becomes discoloured and 
SRB activity at the inner steel surface can be identified by slime is present. 
correct sampling, as shown in Figure 7.6. 


02) Pabe 


Where to sample 
1. From the bottom of the tank to check for the presence of SRB. 


Distillate Cargoes: 
Sampling fuel cargoes 
Sampling techniques used to draw samples for testing, for 
other cargo specifications and bunkered fuel are appropriate. 
OIL Microbiological tests on composite top, middle and bottom 
WATER samples are more representative than those conducted upon 
SAMPLE LOCATIONS SLUDGE a running sample. An absolute bottom sample is also advis- 
able, preferably one containing water, as shown in Figure 7.8. 
The water may be tested by rapid methods and then passed 
to a laboratory if contamination is indicated. 


Figure 7.6 
Correct sampling position in bilges 
7.3 Interpretation of Results 
6 Onboard test kit methods often indicate variations when oil 
1. Sample deep bilge bottom sludge. phase samples are tested, being designed to test aqueous 
2. Additionally, sample steel surfaces at the water/oil inter- samples. However, it should be remembered that each test 
face, as high level microbial activity may be present. method is suited to its particular requirement. 
3. If corrosion is observed, sample by scraping sludge or 
water from the crevice pits. This is best carried out insitu Fuel Oil: Fitness for use of a fuel is a function not only of the 
as exposure to air and drying results in the eradication of numbers of microorganisms present but also dispersion of 
SRB, as shown in Figure 7.7. microbial fouling products in the fuel. A limit figure is probably 


Figure 7.7 
Progressive growth of SRB in a culture test from single cell to heavy contamination 
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Figure 7.8 
Bottom sampling device 


10,000 per litre, although there will be occasions where fewer 
can be the direct or indirect cause of operational problems or 
when more do not give rise to operational problems. Fuel oil 
guideline limits are shown in the Figure 7.9. 


Lubricating Oil: It is not possible to cover all test results for 
each oil system in which microbial problems could arise 
onboard. Similar tests and interpretations could be relevant 
for turbine oil, gear oil and hydraulic oil systems. The results 
and interpretations from a crankcase oil system of a slow 
speed diesel engine have been taken as an example. 

Microbial growth in crankcase oils is suppressed by the 
proper functioning of the purifier and heater. Its performance 
as a ‘pasteuriser’ is easily checked by testing samples of oil 
before the heater and after the purifier. All other system tests 
should be carried out at the temperature of the oil after the 
cooler. Storage tank drain samples should be tested at 20-28°C. 
These lubricating oil guideline limits are shown in Figure 7.10 
and Figure 7.11. 


Cooling Water: The cooling water should be tested on a 
routine maintenance basis. Tests should be carried out at the 


BEFORE PURIFIER HEATER 
Bacteria and/or yeasts 
10% plus 


Negative Negative 


AFTER PURIFIER HEATER 


TANK BOTTOM ACTION 


Category A 
< 500 per litre. 


Acceptable 


Category B 
500-1000 per litre. 


Warning level. 

Microbial proliferation may be 
occurring. Investigate by further 
sampling and testing. 


Use with caution. 

Be alert to possible operational 
problems and spread of 
contamination. Investigate as for 
Category B. 


Category C 
1000-10,000 per litre. 


Category D 
>10,000 per litre. 


Operational problems and spread 
of contamination likely. Investigate 
thoroughly. 


Any detection of SRB would be Category C or D. 
Note: Fuel tested for bacteria, yeasts, moulds and SRB. 


Figure 7.9 
Fuel oil guideline limits for fuel in storage tanks 


temperature of the water in the header tank. pH levels should 
be monitored, as a reduction below pH 8-9 will increase aero- 
bic bacteria, resulting in SRB corrosion. These cooling water 
guideline limits are shown in Figure 7.12. 


Bilges: Presence of SRB is always of concern and where tests 
indicate potential problems, hull plates should be examined 
for corrosion and possibly biocide treatment after cleaning. 
When detected, pH measurements should be taken as indica- 
tive of corrosion risk, being greatest at slightly alkaline pH. 
Outside the range pH 5-9, SRB induced corrosion is unlikely 
as SRB corrosion is associated with a high level of activity by 
aerobic organisms. The bilge water guideline limits are shown 
in Figure 7.13. 


ACTION 


No action at purifier 


Confirm heater 75°C plus. Purify continuously. 


¥ 


Confirm heater 75°C plus 
Check turnover is less than 10 hours. 
Check retention time is more than 30 seconds 


The shorter the kill time the more urgent and thorough 
the action required. 


4 4 


NOTE: If any moulds are detected after the purifier, conduct all the checks listed for temperature, turnover and retention time 


Figure 7.10 
Lubricating oil guideline limits from oil through purifier 
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ACTION 


/ es 
Jv Rae Check coolant. Re-test in one month. 


v Decontaminate system when convenient. 
Check coolant. Inspect for corrosion. 
v Re-test oil. 


Decontaminate system ASAP. Check 
coolant. Inspect for corrosion. Re-test oil. 


- Decontaminate sump bottom with 
biocide via sounding pipe. Check 

v coolant. Re-test oil. 

v Decontaminate sump bottom ASAP. 
Check coolant. Re-test oi. 

v v 

v 


NOTE: If any moulds are detected in the sump bottom but not in the circulating oil, sterilise the bottom via the sounding pipe. 
If moulds are detected in the circulating oil, sterilise the system and inspect carefully for corrosion. 


Figure 7.11 
Lubricating oil guideline limits from oil in circulation 


Tank Bottom Action 


Category A: <10* per ml Acceptable. 


Category B: 10° per ml Warning level. Raise pH level. 
Biocide routine dose. 


Category C: >10* per ml | Decontaminate system. 
Biocide shock dose. 


Any detection of SRB would be Category C. 
NOTE: Water tested for bacteria and SRB. For correct use of 
biocides see section 4.2. 


Figure 7.12 
Cooling water guideline limits in header tank 


Bottom Plate 
Category A: <10* per ml Acceptable. 


Category B: <10* per ml Warning level. Monitor pH. 
Biocide routine dose. 


Category C: <10° per ml Decontaminate system. Clean 
bilges. Biocide shock dose. 


Any detection of SRB would be Category C. 
NOTE: Water tested for bacteria and SRB. 


Figure 7.13 
Bilge water guideline limits for water/sludge on bottom plates 


Lloyd’s Register Technical Association 37 


8. STANDARDS 


There are no agreed or regulatory microbiological standards 
which can be applied to either fuel or fuel water bottoms, lubri- 
cants, bilges and ballast water. 

With regard to fuel; microbial contamination limits in rela- 
tionship to possible operational problems can only be assessed 
as guidance values. 


1. Clean seawater contains approximately 10° bacteria per 
ml but these are unlikely to be a hazard; 

2. Polluted harbour water will probably contain 10* bacterial 
per ml, and they will probably be much more adapted to 
fuel tanks. 

3. Thus, an arbitrary limit of 10° microbes per ml could be 
set for tank water bottoms, with the stipulation that no 
SRB must be detected. 

4. Heavily infected fuels will probably have tank water 
bottoms containing 10°-10° microbes per ml and these may 
be a mixture of bacteria, yeasts and moulds. Again, their 
by-products will probably be more significant than the 
microbes themselves, as bacteria migrating into the fuel 
may survive for hours or days; moulds and yeasts may 
survive for weeks. Good clean fuel contains few viable 
microbes, perhaps only 10-50 per litre. The presence of 
hundreds of viable microbes per litre is suspicious and 
thousands should certainly give rise to concern. 


A figure frequently quoted as a limit for fuel is 500 micro- 
bial particles per litre but exceeding this does not necessarily 
render a fuel unacceptable. However, since microbiological 
tests quantify living organisms in fuel, there will be many 
more undetected dead microbes and biomass which might, if 
filter blocking occurs, render the fuel ‘unfit for use’. It would 
require microbial polymer and dead microbes to be estimated 
by chemical tests for polysaccaride and protein respectively, 
as shown in Figure 8.1. 


WATER IN FUEL 
EMULSION ~ 


BIO-SURFACTANTS 
(POLYSACCHARIDES ETC.) 


Figure 8.1 
Identification of viable microbial contamination 
by chemical tests 
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9. CONCLUSION 


Microbial fouling and corrosion are becoming commonplace 
onboard and will probably continue to increase due to fuel oil 
formulation and handling trends, polluted harbour waters 
plus regulatory pressures. Ship design and building should 
recognise these facts, so that systems are designed to be less 
conducive to harbouring microorganisms and more readily 
sampled and decontaminated if problems are experienced. 
Comprehensive onboard test kits are available for detecting 
and quantifying microbial contamination and for monitoring 
the success of anti-microbial measures. 

There is a growing awareness by underwriters that micro- 
bial damage claims are not due to an ‘act of God’ but are 
detectable and avoidable. An onboard testing regime would 
provide good evidence that due diligence had been exercised. 

Various strategies are available for reducing the problems 
but solutions must be safe and environmentally acceptable. 
The details needed to build these strategies into full working 
protocols will depend upon individual circumstances, the 
time available and access to anti-microbial agents. There are 
many different microbiological problems which need to be 
met with specific, tailored solutions. However, there are 
certain common principles of good practice which can be 
implemented. These anti-microbial strategies are detailed in 
this paper and have proved to be successful in the field. Briefly 
recapping, these are: 


Physical Prevention: preventing ingress of inoculating 
microbes, particularly those already adapted to growth in rele- 
vant environments. Avoid spreading contamination by 
passing clean fluids through contaminated pipes, filters and 
into dirty tanks. Minimize conditions which encourage micro- 
bial growth and water. 


Physical Decontamination: settling, heat, filtration and 
centrifugal procedures all aid in decontamination, the choice 
depending upon equipment and time constraints. 


Chemical Prevention: protecting against minor contamina- 
tion, coupled with good housekeeping to prevent rather than 
cure infection. 


Chemical Decontamination: a wide range of chemical 
biocides is available. Only a few are appropriate to each 
specific application, there being no universal eradication 
fluid. All are toxic and must only be used with due regard to 
health and safety and environmental impact. 


FACS role in this important area of prevention by condi- 
tion monitoring and cure from investigations, has become an 
acceptable and desired service to ship operators. 

Such is the scale of the problems being encountered 
within the marine industry, that ship operators have 
expressed their growing concern. Microbial investigations by 
FACS has identified, that we are no longer just looking at dirty 
fuel oil, crankcases, blocked filters etc, but that microbial 
contamination is now compromising the safe operation of the 
ship. 

To identify the nature, frequency and direct costs relating 
to the replacement of contaminated cargoes, spoiled fluids or 
products, also indirect costs from delays, off-hire, repairs, 
biocides etc, a questionnaire was compiled for circulation to 
ship operators, as shown in Appendix A. 

The response will assess the extent of the microbial prob- 
lems encountered worldwide. Depending on this response 
and an independent assessment by FACS, consideration must 
be given to introduce a research and development 


7 


programme, the results of which will provide the information 
to introduce microbial guidelines into Lloyd’s Registers 
‘Planned Maintenance Schemes’. 
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APPENDIX A: 
MICROBIAL CONTAMINATION QUESTIONNAIRE 


Microbial contamination 
of ships—is this your problem? 


Section 1 (1) Vessel : ; : LR Number 


.2) 


(3) Contact Name : Position 


(4) Telephone Fax Telex 


If vessel has not experienced microbial contamination please complete section 1, tick box and return 


Section 2 If vessel has experienced microbial contamination please complete sections 1 and 2 , tick boxes and return 


Date of incident Systems Cargo Fuel Lube oil FW Bilge Ballast 


08 6 6 


Brief summary of incident 


(9) Direct costs (in US$) $ Indirect costs (in US$) $ 


Were microbiological tests conducted before the incident? Yes | No 


6 6 
LJ 


If yes, list samples tested and results 


(12) What remedial actions were taken at the time? 


6 


Were microbiological tests conducted after the incident? Yes No 


8 


What long-term monitoring / avoidance strategies were taken? 


(16) Master Chief Engineer 
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DISCUSSION 
From Mr. N. Swindells: 


I would firstly like to thank the author for a very 
informative paper which will be a useful reference 
document for all LR staff and is supportive of LR’S 
constitutional mission to safeguard life and property both at 
sea and on land. 

My question to the author relates to the use of chemical 
biocides in marine oil fuel. In view of the increasing focus 
upon environmental policy at both national and 
international levels, what effects would the introduction of 
microbial chemical biocide dosing of marine oil fuel have 
upon exhaust gas emissions? 


To Mr. N. Swindells: 


We are fortunate in LR to have Departments with the 
technical expertise to investigate exhaust gas pollution and 
other environmental issues. Technical Investigation 
Propulsion and Environmental Engineering (TIPEE) have 
been particularly helpful in this regard, as have Fluid 
Analytical Consultancy Services (FACS) who have looked at 
factors such as chemical treatment, marine oil fuel 
composition and microbiological contamination. 

With regards to exhaust gas emissions, their changing 
composition varies in relation to effective biocide dosing, as 
Mr. Swindells has anticipated. 


1. Marine Oil Fuels Composition. 


Despite the wide gulf in physical characteristics between 
gas oils and heavy residual fuel oils, the hydrocarbon 
content hardly changes across the whole product range. 


Carbon %wt. 
85.5-87.5 
85.5-86.5 


Hydrogen %wt. 
12.0-13.5 
10.5-12.0 


Gas Oils 
Fuel Oils 


Hydrocarbon molecules will be present in both the 
saturated and unsaturated configurations, the proportion of 
the latter tending to increase with the severity of refining. 
These unsaturated compounds will contain one or more 
double or triple bonded molecules in straight and branched 
chains and/or multiple ring structures, e.g. asphaltenes. 

Non-hydrocarbons are also present, being principally 
comprised of sulphur which replaces carbon in either chain 
or ring structures in both saturated and unsaturated states. 

Gas oil sulphur content normally varies between 0.2 and 
1.2%wt. where it has not been specifically subjected to de- 
sulphurization processes; the EU’s current target is for a 
maximum 0.2% wt. sulphur content, reducing this to 0.05% 
wt. maximum from mid 1996. 

Fuel oil's sulphur content varies between 1.5 and 3.5% wt. 
except in those areas utilising unduly high (e.g. Kuwait) or low 
(e.g. China/ Argentina) sulphur crudes, in which case the 
levels may be above 4.0% wt. or below 0.5% wt. respectively. 


Water content, although sometimes found in substantial 
amounts, is invariably below the test detection limit of 
0.05% wt. for gas oils and below 0.2% wt. for fuel oils. 

Other components typically account for less than 0.05% 
wt. within either fuel type. 

Nitrogen and oxygen contents of marine oil fuels are not 
normally determined due to the extreme difficulties in 
measurement, although in some cases their presence can be 
significant, particularly if exposed to the atmosphere for 
prolonged periods during manufacture or storage. 

Ash content of a marine oil fuel derives from any trace 
elements in the fuel. Trace elements within gas oils are 
generally at insignificant levels due to clean processing, but 
overhead carry over can occur during refining together with 
contamination during storage and delivery. In the latter 
case, some iron or sodium would normally be detectable. 

Trace element levels of fuel oils would normally be a 
function of the crude source, refining severity (defined as 
the throughput/residue ratio) and proportion of residual oil 
in the blend. In addition, trace elements may be typically 
acquired during refining (aluminium and silicon), storage 
and delivery. Since marine oil fuels have an organic 
petroleum source, virtually all elements may be present, 
albeit at extremely low ppm levels; vanadium and nickel are 
normally the most populous naturally derived elements 
present followed by iron. Some of the other elements 
present in a typical crude oil are given below, in Table 1. 


Table 1 - Typical elemental range within crude oil (ppm) 


Elements Typical range within crude oil (ppm) 
Cu 0.2 - 12 

Alls 

20 

0.1 

0.1 

1.0 

0.1 

0.6 

0.1 


Ca d - 
Mg : ~ 
Ba 
Sr 


2. Marine Oil Fuels Exhaust Gas Emissions. 


Apart from the proportion of the charge air (mainly 
nitrogen and oxygen) not involved in the combustion 
process, the principal components of the exhaust gas stream 


will be carbon dioxide, carbon monoxide, nitrous oxides, 
sulphur dioxide and unburnt hydrocarbons together with 
certain particulates. Concentration values have very little 
meaning in terms of exhaust gas emissions, and it is 
therefore usual to refer to these in terms of rate and mass 
expressed as either marine oil fuel or kilo watt hours, as 
indicated in Table 2. 


Table 2 - Exhaust gas emission rates (kg/tonne marine 
oil fuel) 


Engine speed 


Carbon dioxide 


Carbon monoxide 


Oxides of nitrogen 


Hydrocarbons 


Sulphur dioxide 


*S = Sulphur content depicted 


Water around 1000 kg/tonne marine oil fuel 


Carbon monoxide, nitrous oxides and hydrocarbon 
emission rates can vary substantially above and below the 
quoted values depending upon a wide range of factors 
including: 


° Marine oil fuel type 

° Marine oil fuel preparation 
° Engine type 

° Engine condition 

° Drivertrain 

° Load 

° Ambient conditions 


Particulates are the subject of a current research 
programme by TIPEE whose findings on their emissior 
rates have yet to be reported. These particulates constitute 
residual hydrocarbons, carbon, soluble sulphates, sulphate- 
bound water, nitrates and trace elements, all of which are 
derived from the marine oil fuels and lubricant oils. Wear 
material from the engine, although theoretically present, 
would be at too low a concentration to be detected. The 
equipment used to measure exhaust gas emissions is shown 
in Figure 1. 

Whilst sampling these gaseous components of the 
exhaust gas stream is relatively easy, sampling the 
particulates is a much more complex procedure. A number 
of methods exist: 


. Hot filter in stack. 
. Hot filter out of stack. 
° Dilution tunnel. 


Of these three, only the latter is recommended for diesel 
engines and even with this method, substantial variations 
can exist between consecutive runs. 


3. Microbial Chemical Biocides 


There are many microbial chemical biocides available to 
the ship operator, with different chemical activities, dosing 
concentration, application and purchase price. 

To calculate a theoretical impact of a biocide upon 
normal exhaust emissions during combustion of marine oil 
fuel, the biocide Myacide AS manufactured by the Boots 
Company ple. was chosen as a case study. 

Of particular interest was the impact upon nitrogen 
oxide (NOx) emissions from the biocide with its nitrogen 
functionality, as indicated in Figure 2. 


Figure 1 
Measuring equipment for exhaust gas emissions 


Figure 2 
Biocide empitical formula 


The calculations are based upon a normal cure dose level 
of this biocide, within a homogenised mixture of marine oil 
fuel. These values are dependent upon the biocidal 
molecule, severity of microbial contamination and efficacy 


of the dose level. 


3.1 Microbial Biocide Dosing 


Marine oil fuel biocide = 
Biocide structural formula = 


Myacide AS 
2-bromo-2- 
nitropropane-1, 
3-diol (BNPD) 
Biocide empirical formula = C3H6BrNO4 
Molecular weight = 200 g/mol 
Nitrogen content (Mol %) 3h Mo 
Dosing level of marine oil fuel © = 10 ppm active 
= 10g/tonne of 
marine oil fuel 
Nitrogen added to marine oil fuel = 7/100 x 10 
= 0.7g/ tonne of 
marine oil fuel 


If we assume that this nitrogen and biocide is fully 
converted during combustion to nitrogen dioxide (N02) 
then: 


(N02) emission from biocide dosing = 2.3 g/tonne of 
marine oil fuel. 


3.2. Microbial Biocide Contribution to Exhaust Gas 
Emissions 


From the statistics on exhaust gas emission rates, the 
(NOx) emissions range from 84 kg down to 59 kg/tonne 
of marine oil fuel depending upon the engine speed. 


Biocide dosing would thus only increase (NOx) emissions 
by 0.003 and 0.004 % wt. 


The use of a marine oil fuel biocide such as Myacide AS 
would have a negligible effect upon the (NOx) emission 
levels produced during combustion of marine oil fuel. 
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From Mr. ]. Buxton: 


There are two questions which I would like to raise with 
Mr. Stuart. 


1. Could the author give us some idea of the economics 
of microbial attack, i.e. what does it cost to prevent 
microbial attack using preventative additives versus 
the cost of likely damage? 


nN 


Also, surely it is possible for the marine oil fuel 
suppliers to introduce preventative additives at 
source and, if so, why don’t they implement such 
actions? 


To Mr. J. Buxton: 


In response to your first question, it is important to identify 
the source and prevailing environmental conditions which 
have enabled microbial contamination to occur at all. 

By assessing the different microbial problems and 
associated operational costs relevant to the offshore 
industry and marine sectors, the commercial aspects of 
engaging in a microbial biocide treatment programme will 
be set out. 

For example, the oil fuel and gas industry could 
minimise ship operational problems if effective microbial 
control measures were implemented from the initia! 
exploration stage to the onboard delivery stage. 


Microbial Problems and Associated Operational Costs 


An expanding population and unprecedented technological 
advances have placed enormous demands upon natural 
raw material and energy feedstocks. These demands have 
led to more activity and greater expenditure in oil and gas 
exploration. As the search for new deposits continues, so 
have techniques improved in optimising the recovery yields 
from existing fields. 

Microbial contamination blights all stages of exploration 
and production. Widespread use of water as a solvent, 
hydraulic fluid or cooling medium affords ample 
opportunity for microorganisms to invade and multiply. 
Once present, they can act directly or indirectly on carefully 
balanced systems to reduce their effectiveness. Aerobic 
bacteria may form surface slimes which reduce heat 
exchange efficiency and disrupt flow in pipelines, as shown 
in Figures 3a and 3b. 

Anaerobic bacteria cause oil or gas souring by generating 
hydrogen sulphide (H2S) and corrode pipework, as 
indicated in Figure 4. 

Both problems are extremely costly to rectify in 
retrospect. 


Exploration 


During exploration, microbial contamination can present 
difficulties in a number of ways. Water-based drilling fluids 
or muds frequently contain cellulosic or polysaccharide 
material as dispersing agents. These materials are ideal 
nutrients for bacteria. Significant levels of aerobic bacteria 
in these systems can disrupt the careful balance of 
ingredients and render them useless. Packer, completion 
and work-over fluids are at similar risk of bacterial 
contamination. 


Production 


During oil or gas production, any water contaminated x ) 


bacteria can lead to slime formation and corrosion in 
downstream pipework. Where water flooding or injection is 
employed, the water must be treated to remove bacteria, 
otherwise the formation can become infected with resultant 
plugging, souring and corrosion problems. 


Yield Enhancement 


When enhancing yields, well-squeeze treatments and 
fracturing fluids must also be treated against bacteria in 
order to prevent involuntary infection of the well and 
formation, and to avoid biodegradation of the cellulosic and 
xanthan gums. 


Initial Storage 


Water storage tanks, filters, gas scrubbing units, fire fighting 
reservoirs, pipelines and fuel storage tanks can all suffer 
from bacterial contamination. Whilst the impact upon 
operational efficiency may be indirect, the long term 
consequences are potentially serious, particularly where 
bacteria corrosion is involved. 


Long Term Storage 


Storage of hydrocarbon fuels rarely occurs under totally dry 
conditions. Aviation fuels are often stored in underground 
reservoirs where water bottoms are used deliberately as a 
means of raising and lowering the fuel levels. In other 
situations, eg. land based fuel tanks and sea going oil 
tankers, water may be introduced accidentally by leakage, 
tank flushing or condensation. Water layers formed under 
hydrocarbon fuels can frequently become contaminated 
with a range of microorganisms, including filamentous 
fungi, sulphate reducing bacteria (SRB) and also aerobic 
bacteria, blocking fuel lines, filters and causing corrosion. 
Deep pitting corrosion by anaerobic bacteria is clearly 
shown in Figure 5. 


Onboard Delivery 


Reviewing the case histories in this paper, strongly endorses 
the doctrine that “prevention is better than cure” with 
respect to microbial problems and associated operational 
costs. 

Effective control of bacterial contamination must be 
targetted during all stages of fuel production. This control, 
however, must be exercised with due regard to chemical, 
physical, and toxicological hazards, relating to both human 
and environmental safety. 


Efficacy of a Microbial Biocide Treatment Programme. 


Good onboard “housekeeping” is a preventive measure, but 
cannot remedy existing heavy microbial infection; only 
microbial chemical biocides may assist here. As previously 
identified, choosing the correct biocide is vital based on the 
degree of contamination, dosing levels and kill times. As in 
all aspects of business, some biocides are more cost effective 
but most will generally achieve the desired results. In 
laboratory tests using the biocide Myacide AS, three 
contaminated diesel/water samples were obtained from a 
diesel oil storage tank. Each water sample and its associated 
slime layer were subjected to microbiological analysis and 
the results are recorded in Table 3. 


Table 3 - Total viable counts in water/slime samples from a 
diesel oil storage tank 


Number of colony forming units per ml. 


Sample Sulphate 
reducing 


bacteria 


Aerobic 
bacteria 


Fungi 


Water TX 10 1.0x 10 
6.0 x 10+ 


2.0 x 10 


7.0x 10 


Slime 1.8 x 10 Pasa a3 | 8) 


Water 13x10 1.0x 10» 
2310 
1.0x 10 


3.3.x 10: 


22x10 


Slime 2.8x 10 6.0 x 10 


Water | 1.66x10 G-R 


5.5 x 10 a, 


G-R = Gram negative rods 
fy = Filamentous yeast 
m = Mould 


1.0x 10; 3.0x 10 
1.1x 10% 
1.1x 10 


1.5x 10 


Slime 2.2x10 


& The three water samples were then pooled and divided 


into five aliquots. These were treated respectively with 50, 
250, 500 and 1000 ppm of this water soluble biocide. Each 
aliquot was then sampled at 1, 2, 5 and 7 days measuring 
the quantity of all bacteria and also fungi. Results relating to 
the contamination, dosing levels and kill times, are given in 
Figures 6, 7 and 8. 

These laboratory results confirmed the efficacy of a water 
soluble biocide treatment programme in controlling the 
initial microbial contamination and the time required for a 
100% kill rate. 


Cost Effectiveness of a Biocide Treatment Programme 


From the “kill time” results depicted graphically, it is 
possible to calculate the cost effectiveness of the soluble 
biocide against different contamination and dosing levels, 
as indicated in Table 4. 

The water soluble chemical biocide must have a genuine 
high affinity for the aqueous phase to migrate into, within 
any heterogeneous two phase systems. 


Table 4 - Cost effectiveness of a biocide treatment programme 


Water soluble phase Diesel oil soluble phase 
(Myacide AS) (Myacide S14) 

Dose level 50 ppm-g/tonne water | Dose level 10 ppm-it/tonne diesel 

Cost/tonne water UK £0.05-£0.07} Dose level It-it/10 tonne diesel 

Cost/tonne diesel UK £0.50 
(small volumes) 

Cost/tonne diesel UK £0.34-£0.40 

(large volumes) 


Minimum Inhibitory Concentration (m.i.c.) Dose Level 


In addition, the minimum inhibitory concentration (m.i.c.) 
dose level can be calculated as the lowest level which is 
required to prevent growth of a particular microorganism. 
The m.i.c. values using this water soluble biocide against 
several common water borne aerobic and anaerobic 
bacteria, are shown in Tables 5 and 6. 


a 


Table 5 - Minimum inhibitory biocide level 
(m.i.c.) against aerobic bacteria 


Microorganisms 


m.i.c. in ppm. 


GRAM NEGATIVE BACTERIA 
Pseudomonas aeruginosa 25 
Pseudomonas fluorescens 25 
Pseudomonas cepacia 25 
Klebsiella pneumoniae 
Escherichia coli 20 
Enterobacter cloacae 25 


GRAM POSITIVE BACTERIA 
Staphylococcus ssp 
Bacillus subtilis 


Table 6 - Minimum inhibitory biocide level 
(m.i.c.) against anaerobic bacteria 


Microorganisms 


MARINE 
Desulfovibrio desulfuricans 


FRESH WATER 
Desulfovibrio desulfuricans 6.25-12.5 


Desulfovibrio vulgaris 6.25-12.5 


Partition Coefficients of Different Oil Fuels 


To determine the partition coefficients of different oil fuels 
and water, three common oil fuels - diesel, kerosene and 
avtur (aviation turbine fuel) - were assessed. Two 
experiments were conducted, the first measuring the 
partition coefficient with the Myacide AS biocide dissolved 
in the aqueous phase. In the second experiment, the biocide 
was dissolved in the oil fuel phase using methoxyethanol as 
a carrier solvent and the amount which subsequently 
partitioned into the aqueous phase was measured. The 
results are given in Table 7. 


Table 7 - Oil fuel/aqueous partition coefficients for the biocide 
at 22-24'c 


Partition coefficients 


Method 1 Method 2 
Biocide in Biocide in 
aqueous phase oil fuel phase 


Fuel 
Mixtures 


Avtur/water 6) 0 
0.0030 0.0060 
0.0018 0.0021 


Diesel/water 


Kerosene/water 


Results from method 1, indicate that >99.5% of the 
biocide was retained in the aqueous phase. From method 2, 
it is shown that 99.3% of the biocide dissolved initially in 
the oil fuel phase partitioned into the aqueous phase. This 
high affinity for the aqueous phase is an important property 
of such a biocide. Where bacterial problems occur in two 
phase systems, e.g. produced water in oil fuel pipelines and 
water ballasted oil fuel tanks, the biocide will remain in the 
aqueous phase to exert maximum effectiveness. 

If the system is essentially one phase and oil-based, it 
will require a different biocide with excellent oil fuel 
solubility and dispensancy. 


Figure 3a 
Aerobic bacteria growth and development of surface slimes 


Figure 3b 
Aerobic bacteria growth and development of surface slimes 
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Figure 4 
Anaerobic bacteria corrosion of pipework 


It should be noted that the recommended biocide dose 
level for specific applications, be it within the water phase 
or oil fuel phase, is calculated upon the individual mass 
present and not upon the total combined mass of water and 
oil fuel phase. 

Activity of this biocide was studied against a mixture of 
marine bacterial insolate. The results demonstrated that the 
m.i.c. levels were sufficient in inhibiting and preventing 
both aerobic and anaerobic bacterial growth. 

The data generated clearly identified that SRB are 
particularly sensitive to BNPD biocides, being inhibited at 
3.0 - 6.25 ppm and no viable SRB being recovered at 
between 6.25 - 12.5 ppm, during laboratory tests over one 
day. Use of a water soluble biocide was both cost effective 
and efficient in its application and contrasted favourably 
against allowing untreated microorganisms to proliferate, 
which gave rise to unacceptable operational problems. 


Figure 5 
Sulphate reducing bacteria deep pitting corrosion 


In answer to the second question, we have recently 
reviewed onboard marine oil fuel deliveries to various ships 
and different ports, monitoring microbe levels and recorded 
any operational problems being experienced immediately 
after receipt of these suppliers. Our survey indicates that 
marine oil fuel suppliers have not implemented a biocide 
treatment programme policy. 


Marine Oil Fuel Supplier’s Responsibility 


The recent high incidence of contaminated gas oil cargoes 
which have in turn been supplied to ships, does little to 
improve the confidence of operators in the marine industry. 
One would have thought that this would have sent shock 
waves through out the industry, but still we encounter ships 
experiencing microbial operational problems directly 
related to contaminated supplies. 

In every line of business it is natural to seek to maximise 
profit, and competition may tempt business to cut out what 
they view as “unnecessary” expenditure. Allied to this, is 
the inescapable fact that the running costs of a ship are high 
and returns limited, so encouraging fierce competition and 
creative interpretation of even very strict rules. 

Despite the introduction of BS MA 100 in 1982 and ISO 
8217 in 1987, marine oil fuels have been subject to accidental 
and deliberate quality abuse. Why is it then that all attempts 
have failed to control the quality of marine oil fuels? It is 
simply that the current specification is inadequate and does 
not provide the desired protection, or rather that we expect 
too much of the engines and treatment plants? 

In my opinion, the fuel specification is adequate and 
expectations of performance are realistic; instead attention 
should be directed towards poor “housekeeping” practices 
where microbial contamination problems begin. 

The perception of quality itself inevitably introduces a 
natural conflict of interest, where the blame for poor quality 
is apportioned between engine manufacturers who demand 
quality oil fuel and oil fuel manufacturers who demand 
quality engines, the end user wants all round high quality 


of course. This is why the definition of quality of marine oil 
fuels will remain an enigma, as it is inseparable from the 
issue of quality engines. 

There is also clearly a difference between those who 
accidentally produce and supply a poor quality product and 
those who deliberately do so, usually in ignorance of the 
consequences to the safe operation of the ship and the crew. 
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Activity of biocide against aerobic bacteria in a water 
sample from a diesel oil storage tank 
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Figure 7 
Activity of biocide against anaerobic sulphate reducing 
bacteria in a water sample from a diesel oil storage tank 
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Figure 8 
Activity of biocide against yeast cells in a water sample 
from a diesel oil storage tank 


Marine Oil Fuel Quality Specification 


High quality products are usually expensive and in order to 
secure sales, harsh commercial realities inevitably moderate 
the ideal quality desired. 

In the marine industry, the balance between technical 
requirements and price is delicate and in practice the 
ultimate arbitration of oil fuel quality takes place in the 
engine and treatment plant. 

We have in the past, already addressed many of the 
practical problems which caused conflicts of interest and in 
the current economic climate, there is little incentive to 
further upgrade refinery processes and to ameliorate 
marine oil fuels. 

Certainly, improvements in marine engine design and 
treatment plants over the past decade, appear to have 
provided some tolerance to variable oil fuel quality. 

Although the specification offers full protection if 
adhered to, analytical techniques provide only a partial 
safeguard and warning against adulterated oil fuel. 

In cases which do escape prior observation, the engine 
and treatment plant will ultimately provide definitive 
evidence of poor oil fuel quality and litigation may be the 
ultimate guardian. Obviously, this route provides no long 
term answer and is only a short term palliative. 


Marine Oil Fuel Protection of Quality 


The current fuel specification provides adequate indication 
of merchantable quality. That the specification does not list 
every attribute required of a merchantable oil fuel, does not 
mean either that the seller is free to deliver unmerchantable 
oil fuel or that the oil fuel complying with all tests listed but 
which for other reasons is unusable, should be regarded as 
merchantable. After all, the permissible content of 
radioactive material is not listed in any oil fuel specification 
which is not a carte-blanche for its inclusion, as it is obvious 
that its presence is most undesirable. Similar logic must be 
applied to microbial contamination as being unacceptable 
and although not specifically mentioned in the current 
international specification, should not be tolerated from the 
fuel of any supplier. 

ISO 8217 is an efficient specification which calls for 
minimum independent testing and expenditure to control 
quality. Since this specification fully protects the consumer, 
only a few accidental problems should occur and microbial 
contaminated supplies should have been eradicated. 

However, some less prudent suppliers are prepared to 
take risks with health and safety for monetary gain, 
exacerbated when some oil fuel buyers shop around for the 
cheapest deal. The strong desire to save and make money 
provides sufficient incentive to cut corners regardless of the 
consequences in maintaining oil fuel quality. Owing to the 
very nature of the product and the rather cavalier way it is 
handled, the specification cannot be expected to prevent all 
forms of quality abuse, but it has proved to be very effective 
in identifying most offenders. 

The control of quality for oil fuels intended to be used on 
land or at sea is governed by totally different 
considerations. It certainly appears that so far the 
development of land rules and regulations has outstripped 
those which protect marine oil fuel quality. It may well be 
that equally stringent rules and regulations for marine oil 
fuels will be adopted in the near future, which will 
automatically eliminate “out of specification” oil fuel. 

There is also more awareness by marine oil fuel 
purchasers, who now recognise that agreement contacts 
require a clause stating that “products are to be microbial 


hould reduce the numerous cases of contaminated 
supplies. 


ee... Although not precise in its definition, its presence 


Protection of Ship Operators 


It would appear that everybody is interested in oil fuel 
quality, yet the problems persist. As strange as it may 
sound, the abuse of quality is one of the driving forces 
behind the specifications, rules and regulations, as all these 
must respond to the problems created in the market place. 

The perception that the current specification 
inadequately protects the oil fuel user is wrong. Due to the 
great variety of marine oil fuel grades available and even 
greater variety of engines in use, a rigid and more detailed 
specification would adversely affect the implied meaning of 
oil fuel merchantability. 

It is hoped that the work on standardisation of 
procedures world-wide will continue and a comprehensive 
system can be established, which will both be able to deal 
satisfactorily with the current oil fuel quality problems and 
be sufficiently elastic to keep pace with the future advances 
of the industry. 

The petroleum and marine industries have already put 
an enormous effort into providing solutions. As it becomes 
harder to interfere in quality safety margins, the methods 
used will tend to become more sophisticated, increasing the 
onus of industrial responsibility to deal with them. 

There are a multitude of ways to abuse quality, some of 
which we know and guard against, others which we have 
yet to experience. Is it easier to define the effects that these 
may have on the user even if they are not always 
immediately apparent, the most evident being the rapid and 
catastrophic damage to the engine. Much less obvious is the 
increased maintenance and excessive premiums due to the 
exceptional number of claims, which can significantly add 
to the running cost of the ship. 

Without standards of acceptable microbial limits, the 
marine industry will continue to be treated on the mentality 
of “out of sight, out of mind” leaving the false impression 
that ship operators are themselves responsible for resolving 
supply problems. Since oil fuel suppliers are not party to 
what ship operators intend to do with the loaded oil fuel, be 
it for immediate use or long term storage, they cannot be 
the ones to decide microbial limits. By definition, acceptable 
microbial contamination limits should not result in engine 
damage and treatment plant operational problems. 

Should oil fuel suppliers’ good “housekeeping” practices 
fail to achieve such standards, other preventative actions 
should be implemented, such as the introduction of a 
controlled microbial biocide treatment programme. There is 
evidence to suggest that the introduction of preventative 
dosing of chemical biocides in oil fuel storage tanks ashore 
would partially resolve ship operators problems. 

The reason that this approach to ensuring the safe 
operation of ships has not been adopted is purely financial. 
The additional costs of the biocide and dosing programme 
by the oil fuel suppliers would either have to be absorbed 
by them or passed onto the ship operator. 
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From Mr. A. Wright: 


May I offer my congratulations on an interesting paper and 
presentation. This paper is very comprehensive, but I have 
two specific points relating to spa pools that I would like 
the author to clarify in view of recent reports on the 
bacterium legionella. 


1. My first point concerns the hygienic management of 
public facilities such as spa pools onboard ships, and 
more especially within sport complexes, health 
clubs, hotels etc. To what standards and statutory 
requirements are spa pools operated against to 
protect bathers from infection? 


nN 


My next point relates to the personal health of 
bathers. In the presentation, sources of infection were 
identified as were the various microorganisms 
responsible. Could the author elaborate on the 
potential health hazards associated with spa pools? 


To Mr. A. Wright: 


To address your first point, it is important to define the 
function of spa pools. In this way, a better understanding of 
the requirements for hygienic operation of spa pools may be 
reached. 

There is no evidence to suggest that spas onboard ships 
and onshore in leisure facilities should give rise for concern 
when maintained to the required standards. 

There is evidence however, of infection occurring with 
poor standards of hygiene usually due to ignorance of the 
health consequences. 


Management of Spa Pools 


A spa pool is a self-contained body of warm water designed 
for sitting in as opposed to swimming and such pools hold 
between 2-12 people. There is often a mechanism for 
ensuring a flow of water around the user and the pool is not 
drained or refilled after each user. This relatively small 
volume of water in relation to the bather load, combined 
with a raised temperature of 30-40°c and agitation of the 
water through hydrojet circulation and/or air induction 
bubbling, makes considerable demands on the disinfection 
and filtration systems. Careful management of the pool is 
therefore essential to ensure that the water quality does not 
deteriorate. Reports of health problems associated with spa 
pools suggest that their management does not always 
receive a sufficient degree of attention. 

The Swimming Pool and Allied Trades Association 
(SPATA) standards for the installation and operation of spa 
pools (SPATA 1989) and The Treatment and Quality of 
Swimming Pool Water (Department of the Environment, 
1984), are hygienic management documents for the 
protection of bathers. 

Management of public spas requires an appreciation of 
the health hazards that may be encountered by the bather if 
not properly maintained. Managers and attendant staff 
should have working knowledge of the spa, its systems and 
the rules governing its use. They should satisfy themselves 
that these systems and rules afford the public a satisfactory 
level of protection from possible injury or infection. 

The importance of safe practice will be appreciated when 
it is realised that the hazard level for just 4 people in an 
average spa is equivalent to that for several hundred in a 
typical swimming pool. Moreover, spa pools are run at 
much higher temperatures. Hot tubs, self-contained 
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(portable) spas and various other mainly domestic types x ) 


spa pools are not recommended for heavy bather use 
usually associated with public spas. 


Design of Spa Pools 


The design of a spa shell for public use will conform to one 
of two basic types. 


1. Conventional (rim) types keep the water level 
150mm to 200mm (6 to 8 inches) from the top edge 
to accommodate the bathers. 


2. Overflow (deck-level) designs maintain the water 
level at a constant height whilst any excess water is 
transferred to a balance tank to be replaced as the 
bathers leave the spa. 


Under most U.K. or European standards, an overflow 
spa is required for medium to heavy bathing loads. 
Whichever type of spa is provided, its surface must be 
smooth and free from defects or projections and it must be 
easy to drain and clean. Overflow channels and balance 
tanks must also be accessible and easy to clean. A 
diagrammatic representation of a typical overflow spa pool 
with water filtration system, separate water circulation 
system for the massage jets and a separate air massage 
system is given in Figure 9. 
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Figure 9 
Design of a typical overflow spa pool 


Spa Design Bather Capacity 


Design bather capacity is the maximum number of bathers 
that may use the spa at any one time. For each bather there 
should be a minimum surface area of 0.37m2 (4 sq ft) and a 
minimum volume of water of 250 litres (55 gallons). 


Spa Design Bather Load 


Design bather load is the maximum number of bathers that 
may use the spa in any | hour period. Each 1 hour period 
consists of 3 x 15 minute sessions, followed by a 5 minute 
rest period. The design bather load is calculated from the 
total amount of water in the system, including pipework 
and balance tanks, taking the filter capacity and dosing 
system into account. 

The spa should be managed to ensure the system is 
operated within the bather capacity specified by the 
manufacturers and that bathers are advised not to exceed 15 
minutes’ immersion. Practical experience and a full risk 
assessment are required to confirm that the bather load 
gives satisfactory water quality. 


Spa Water Quality 
SPATA standards (SPATA 1989), suggest that the water 


should be changed when: 


Number of bathers = 100 x the water capacity measured 


in m3, or, 


Number of bathers 


1/2 the water capacity measured in 
gallons. 


Thus, if the water capacity is 3 m3 (660 gallons), then the 
spa water should be replaced by fresh water after use by 300 
to 330 bathers. This should be considered an absolute 
minimum and as a general rule 30 litres/day/bather entry 
or 50% of the water in the spa system, whichever is the 
greater volume, should be replaced each day. In many 
commercial installations the bather load is such that the 
water will need changing at least once a day. In such cases, 
continuous dilution may be a solution. 

With effective skimming and filtration systems, there 
should be a maximum water turnover time of 30 minutes 
for low use spas, and a 6 minute turnover time as an 
optimum for commercial spas. The turnover time is the time 
taken for the entire pool water volume to pass through 
filters and treatment plant and back to the pool. Filters 
should be backwashed on a daily basis. 


Spa Water Disinfection 


A variety of disinfectants is used in spa pools. The spas may 
either be treated individually or as part of a combined 
swimming pool water treatment system of the type found in 
leisure complexes. Due to the different demands on the 
water purification system, such combined facilities make 
greater demands on the technical control of water quality. 
The nature of the incoming mains water supply and effect 
on pH needs to be taken into consideration before selecting 
the disinfectants. 

Such as bromochlorodimethylhydantoin, chloroiso- 
cyanurates, sodium hypochlorite, calcium hypochlorite, or 
ozone in conjunction with a residual disinfectant e.g., 
sodium hypochlorite or calcium hypochlorite. However, 
combined treatments are usually more expensive to install 
and technically more demanding to operate. It has been 
suggested that the by-products of disinfection procedures, 
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such as the formation of trihalomethanes and bromates may 
have a carcinogenic or toxic activity and further research is 
being undertaken to determine this risk. Present evidence 
would indicate though that the known risks of infection 
from failure to disinfect substantially outweighs any 
putative carcinogenic activity from disinfection procedures. 

Maintenance of disinfectant levels may be influenced by 
various features e.g. elevated temperatures, amount of 
sunlight present, high turbulence caused by the 
hydrotherapy jets and/or aeration and high organic loading 
due to heavy use patterns. 

However, no disinfectant will work efficiently when 
organic matter has accumulated in the strainers, filters and 
pipework ete. 


Sources of Consultation 


Detailed advice on the management of a spa pool will 
usually be given by the manufacturer. When problems of 
water quality occur, the Environmental Health Department 
of the Local Authority, the local Public Health Laboratory or 
other independent water testing laboratory may be 
consulted. Associated health problems should be reported 
to the Department of Public Health Medicine of the District 
Health Authority for the attention of the Consultant in 
Communicable Disease Control (CCDC), who will, if 
necessary, seek further advice locally or from the Public 
Health Laboratory Service (PHLS) Communicable Disease 
Surveillance centre at Colindale. More general advice on 
management may be obtained from the Institute of Sport 
and Recreation Management and the Pool Water Treatment 
Advisory Group. Detailed advice on the construction and 
installation of spa pools can be obtained by reference to the 
SPATA standards (SPATA 1989). 


Health and Safety 


The Health and Safety at Work Act 1974 and numerous 
regulations made thereunder impose statutory 
responsibility on all operators of spa pools. It is the duty of 
operators to have a safety policy, safe system of work and 
undertake a Control of Substances Hazardous to Health 
(COSHH) assessment. All employees should also be 
adequately trained to operate spa pools to ensure there is no 
risk either to themselves or users of the pool. The main 
current regulations, codes of practice and related 
documents applicable to the management of spa pools are 
well established. Prior to the installation of a spa pool, 
operators should consider all implications of the statutory 
requirements, as the potential risks from inadequate design, 
overloading and poor management are considerable. It is 
not the duty of either the Health and Safety Executive or 
Local Authority enforcement staff to undertake 
microbiological or chemical examination of spa pool 
water, although enforcement officers have the power to take 
water samples under the Act in premises under their 
jurisdiction. It is the operator’s job to arrange routine 
sampling of the pool and to ensure compliance with all 
the relevant statutory provisions and the manufacturer’s 
maintenance and operational manuals. 

Your second point is well selected and the good health of 
bathers will only be assured by maintaining the water 
purity in spa pools to an acceptable condition. 


Spa Water Treatment 


Water treatment can be divided into two main areas - 
filtration and disinfection. Filtration is necessary to 


maintain a clean, clear and safe environment. Disinfection is 
required to prevent cross infection between bathers by 
destruction of microorganisms. 

Total effective purification relies on powerful filtration, 
working in conjunction with continuous disinfection via a 
complete and speedy circulation system, to collect, clean 
and disinfect water without plant failure, undue water and 
chemical wastage or needless expense. 

A daily spa maintenance programme should achieve 
proper physical operation of the spa and provide a suitable 
chemical balance and sufficient microbiological control. To 
ensure optimum water quality within the spa, it is essential 
that the turnover time of the spa and the design bathing 
loads do not exceed recommended limits. To minimise 
pollution, it is essential that both the spa operator and 
bathers take equal responsibility to encourage good 
hygienic standards. 


Spa Water Purification 


Spa pool maintenance is undertaken by different 
individuals and organisations including hoteliers, health 
clubs, local authorities and leisure companies. 

To encourage the use of any spa it must appear inviting, 
offer a safe and pleasant environment, and be free from 
irritants, harmful microorganisms (viruses, bacteria, and 
fungi) and algae. The small volume of water, higher 
operating temperature and generally heavy bathing loads 
make the water treatment in spas more onerous than in 
conventional swimming pools. 

Objectives of spa water treatment are the same as those 
for swimming pools, namely to: 


1. Remove suspended and colloidal matter and to leave 
the water clear, bright and colourless. 


2. Remove organic matter which may act as a source of 
food for bacteria and make the water appear 
unattractive. 


3. Remove or destroy bacteria and render the water 
bactericidal, in order to kill any subsequently 
discharged bacteria. 


4. Maintain the pH of the water at an optimum for 
disinfection. 


5. Maintain a comfortable temperature for bathers. 


There are essentially two types of pollution, that 
generated by bathers, and that from external sources, i.e. 
atmosphere, surface surrounds and bathing costumes. The 
pollution generated by bathers comes from: 


. Nose - mucus 
. Mouth - saliva 
. Skin - perspiration, dead skin, sun tan lotion and 


cosmetics 
. Urine and faecal matter 
° Hair 


Pathogenic micro-organisms from external sources have 
not been identified, based on the premise that bathers are 
responsible people who would not knowingly expose 
others to deliberate infection. 


Health Considerations 


All forms of human activity are associated to some extent 
with potential health hazards and the use of spa pools is no 
exception. A well managed pool will provide opportunities 
for rest and relaxation. Depending upon the duration of 
immersion, changes in circulation will occur with a 
tendency for more blood to be returned from the limbs, 
diluted with tissue fluid, to the central circulation. This 
results in an increased output from the heart without 
adversely affecting blood pressure. Secretion of urine by the 
kidneys is also increased. These changes may contribute to 
the feeling of well being experienced by normal persons 
when in a spa pool. There may also be a therapeutic benefit 
for sufferers from some illnesses and the increasingly 
popularity of spa pools suggests that these benefits are 
being more widely appreciated. 

Under adverse circumstances there may, however, be 
unwanted health effects such as infections, skin problems, 
and respiratory irritation. 


1. Infections 


Infections associated with the use of spa pools are well 
documented. Prolonged immersion in water at relatively 
high temperatures is not an ideal environment for the skin, 
so it is not surprising that there have been a number of 
reports of skin problems in spa pool users. Ervthematous 
(reddening) and pruritic (itchy) rashes may occur as a result 
of Pseudomonas aeruginosa infection. These usually develop 
at least 12 to 24 hours after exposure, mainly affecting the 
trunk. Sometimes a more severe infection produces a 
pustular folliculitis (infection in the hair follicles) which 
occasionally is accompanied by a mastitis (nipple or breast 
infection) in males and females. 

In a previously healthy person, the infection usually 
clears up of its own accord within a week. Less commonly, 
Pseudomonas otitis externa, an ear infection, is seen which is 
more likely to arise after head immersion. 

Urinary tract infections caused by Pseudomonas 
aeruginosa have been reported which have developed within 
48 hours of using a spa pool. The isolates from the patients 
were of the same serotype as that of the organism isolated 
from the pool. 

There has also been one report of Pseudomonas aeruginosa 
pneumonia developing in a previously healthy man who 
had spend 90 minutes immersed up to his neck in a spa 
pool. Again, the organism isolated from the patient was 
indistinguishable from that isolated from the pool. 

More serious infections have resulted from the presence 
of Legionella pneumophila in spa pools. For this infection to 
occur, it is necessary for the organism to be inhaled in the 
form of fine droplets and in some whirlpool spas there is 
sufficient disturbance of the water to enable this to happen. 
In the UK, 16 cases of Legionnaires’ disease were associated 
with the use of spa pools at a hotel: Legionella pneumophila 
serogroup 1 was isolated from the pools. The 
microorganisms Legionella pneumophila are shown in 
Figure 10. 

Seven cases of Pontiac fever were also associated with 
these pools. This is a less severe form of legionellosis which 
presents itself as an influenza-like illness. Outbreaks of 
Pontiac fever associated with spa pools have also been 
reported from the USA. In Scotland, there was an outbreak 
of a Pontiac fever-like illness associated with a leisure 
complex which included a whirlpool. Here Legionella 
micdadei was thought to have been responsible. 

Some opportunist mycobacteria are associated with 
water and could give rise to infection in pool users, more 
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Figure 10 
The microorganisms legionella pneumophila 


particularly if they are immuno-compromised. There is one 
report of Mycobacterium fortuitum infection of a man who 
regularly used a spa pool; the organism was cultured within 
the pool water and the filter. 

Other possible spa pool-associated infections include 
fungal infections of the skin and viral infections of the eye. 
There is, however, no evidence to incriminate spa pools in 
the transmission of hepatitis B or human immuno- 
deficiency viruses. 

It should be emphasised that all infections so far 
reported have been associated with poor management of a 
pool which has allowed the water quality to deteriorate, 
often as a result of failure of the disinfection system or 
overloading of the pool with bathers. This can result in 
proliferation of microorganisms from a single cell to a 
consortium in a short time, as shown in Figure 11. 


2. Skin Irritations 


Prolonged and frequent use of spa pools may produce skin 
irritation, but individual susceptibility to this will vary. 
Characteristically, these rashes appear within 12 hours of 
immersion. There is well documented evidence that some 


users of pools where the disinfecting agent is 
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bromochlorodimethylhydantoin (1,3 bromocholoro 5,5 
dimethylhydantoin or BCDMH) experience skin problems 
associated with a contact dermatitis, although skin 
irritations may be associated with almost any chemical. 
Sufferers from eczema should be made aware that their 
condition may be worsened by excessive exposure. 


3. Respiratory Irritation 


In poorly managed pools there may be a build up of 
compounds produced by the reaction of the disinfectant 
with organic substances derived from the bathers. When 
inhaled, these compounds can produce irritation of the 
bronchial tree with resultant wheezing and coughing. This 
is more likely to occur in pools situated in confined and 
poorly ventilated areas. 

Persons suffering skin conditions and those who are 
immuno-suppressed, subject to disorders affecting the 
cardiovascular or nervous systems should seek medical 
advice before bathing in spa pools. 


Microbial Biofilms 


When growing in water systems, most microorganisms 
prefer to adhere to a surface where they may embed 
themselves in a slime layer and grow in consortium with 
other microorganisms. Such a layer of microbial growth is 
termed a biofilm and can vary from a few micrometres to 
millimetres in depth, as shown in Figure 12. 

To kill organisms in a biofilm may require up to a 
thousand-fold longer exposure to a given disinfectant 
concentration than it would to kill the same organisms 
freely suspended in water. Thus, it is imperative that spas 
be designed and operated in a manner that both limits 
biofilm development and enables any that develop to be 
physically and/or chemically removed, as shown in 
Figure 13. 

The pool, pipework and balance tank should be 
constructed of materials known not to support the growth 
of microoganisms and which comply with BS 6920 (BSI 
1988). It should also be possible to clean not only the 
surfaces of the tanks and pool, but also the inside of the 
pipework and, for this purpose, appropriate access points 
should be included in the design. 


Algae 
There are three common types: 


1. Green algae are free floating, turn the water cloudy 
green and are easily killed by treatment. 


i) 


Blue-green algae are usually called ‘black’ because 
of their appearance. The term blue-green algae in this 
instance is a misnomer, and these organisms are now 
classified as cyanobacteria. They are found on floors 
and walls, visually evident as small black dots and 
are resistant to algicides. 


Ww 


Brown or red algae are actually usually yellow or 
yellow-brown and are found on pool walls, floors 
and steps. They may also be rust-red, green or pink 
in colour. 


Treatment: Green algae are effectively killed by raising the 
concentration of disinfectant to around 10mg/L, whereas 
blue-green and red algae usually require vigorous 
scrubbing in conjunction with an elevated concentration of 
disinfectant. 


Figure 11 
Microbial proliferation from a single cell 


Figure 12 
Microbial growth and the formation of biofilm 
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Figure 13 
Chemical disinfectant killing and dislodging microbial biofilm 


Spa Area Hygiene 


It is essential to maintain both the spa and the surrounding 
walkways in a good hygienic condition by the 
implementation of regular cleaning procedures. 

Careful consideration should be given to the use of 
proprietary cleaning agents for cleaning these areas, as 
some materials may have a chlorine/bromine demand (i.e. 
neutralise these disinfectants). Any carry-over into the spa 
water may react with the residual disinfectant, causing 
foaming and/or be incompatible with the fabric of the spa 
and surrounding area. 

The spa water line and the surrounding area should be 
cleaned regularly, ideally on a daily basis using a solution of 
free chlorine, with a concentration of 5-10 mg/L. The 
surrounding areas are often particularly difficult to clean 
and a high pressure hose may be needed in conjunction 
with brushing the floor surfaces. 


nm 
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From Mr. S. S. Dhanjal: 


Firstly, my congratulations to the author for a thorough and 
well balanced coverage of a 

subject few of us are familiar with. To have a better 
recollection of the microorganisms discussed in the paper 
and especially fungi, could the author produce a small 
visual aide-memoire for Surveyors? 


To Mr. S. S. Dhanjal: 


To produce a comprehensive aide-memoire for Surveyor 
microbiologists is beyond the scope of this paper, if all the 
common or medically most important microorganisms are 
to be included. A dictionary of genera (and families of 
virae) in which the organisms are listed under, are identified 
within four primary divisions: Bacteriology, Mycology, 
Virology, Parasitology. 

Microbiology is the study of changing species which 
move between genera and agglomerate or fracture into new 
groups, species or substrains. 


Mycology 


The successful study of fungi requires a botanical interest 
plus a great deal of experience of dealing with yeasts and 
moulds. 

A mycologist has to recognise systemic mycoses in 
dimorphic form i.e. a yeast-like cell in tissue and culture 
media at 35°c, as well as a mycelia form when grown at 
25°c; the mycelia confirms the identity of the fungus. Full 
botanical classification of many medically important fungi 
is not possible because their sexual form has not been 
recognised i.e. they belong to the “fungi imperfecti”. 

It is important to remember that colonial morphology 
and colour is often dependent upon the culture medium 
used. Fungal cultures in laboratories tend to spread and 
although this is just a nuisance with truly saprophytic 
cultures, it makes pure culture maintenance difficult. In the 
cases of pathogenic or opportunistic fungi, care should be 
exercised. 


Classification of fungi 
Fungi are divided into two divisions: 
1. Myxomycota (slime moulds) 
2. Eumycota (true fungi) 
Eumycota 
Two basic growth forms are: 
1. Unicellular or yeast form which reproduces by 


simple budding. 
Colonies are usually moist or mucoid. 
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Filamentous or mould form which reproduces by 
spores or conidia. 
Colonies are usually velvety or cotton like. 


Filaments are known as hyphae and the mass of hyphae 
form the mycelium. There are two kinds of hyphae, non- 
septate (coenocytic) and septate. The septa divide the 
hyphae into compartments but not into cells. 


Subdivisions of Eumycota: 


1. Mastigomycotina - one class only: oomycetes - typi- 
cally aquatic fungi containing 580 species, 
non-spetate hyphae. 


2. Zygomycotina - one class only: zygomycetes - 
rapidly growing, predominantly saprophytic fungi 
containing 665 species, non-septate hyphae. 
Medically important genera include Absidia, 
Basidiobolus, Conidiobolus, Mucor, Rhizopus. 


3. Ascomycotina - classes no longer recognised: mostly 
terrestial saprophytes and parasites of plants 
containing 28,650 species, septate hyphae, sexual 
spores produced within asci. Medically important 
genera include Allescheria, Aspergillus, Blastomyces, 
Geotrichum, Microsporum, Piedraia, Trichophyton. 


4. Basidiomycotina - four classes: hymenomycetes 
(mushrooms), gasteromycetes (puff balls), uredi- 
momycetes (rusts), ustilaginomycetes (smuts) - 
terrestial saprophytes and parasites of plants 
containing 16,000 species, septate hyphae, sexual 
spores produced externally on basidia. Medically 
important genera include the poisonous mushrooms 
and Cryptococcus. 


5. Deuteromycotina - a subdivision created for the 
“fungi imperfecti” i.e. no sexual forms detected. Two 
classes: coelomycetes (produce conidia in sac-like 
structures), hyphomycetes (conidia produced with- 
out sac-like structures). Contains 17,000 species, 
septate hyphae. Most of the medically important 
fungi are included in the “fungi imperfecti” includ- 
ing Candida, Cladosporum, Coccidioides, 
Epidermophyton, Fonsecaea, Madurella, Malassezia, 
Microsporum, Sporothrix, Trichosporon. 


A “clinical classification” of medical fungi can be made 
by grouping the organisms according to the diseases they 
cause in humans. The following fungi represent only the 
more common genera: 


1. The superficial mycoses (no living tissue invaded 
and no pathological changes occur). Malassezia, 
Piedraia, Trichosporon. 


2. Thecutaneous mycoses (no living tissue invaded but 
pathological changes occur). Candida, 
Epidermophyton, Microsporum, Trichophyton. 


3. The subcutaneous mycoses (chronic infections by 
soil fungi after skin injury - mycetoma) Absidia, 
Allescheria, Basidiobolus, Cladosporum, Conidiobolus, 
Fonsecaea, Madurella, Mucor, Phialophora, Rhizopus, 
Sporothrix. 


4. The systemic mycoses (dimorphic fungal pathogens 
causing pulmonary infection from air-borne coni- 
dia). Blastomyces, Coccidiomyces, Histoplasma, 
Paracoccidioides. 


5. The opportunistic systemic mycoses (fungi of low 
virulence which can invade immuno-compromised 
hosts). Absidia, Aspergillus, Candida, Cryptocccus, 
Geotrichum, Mucor, Rhodotorula, Rhizopus, Torulopsis. S 
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‘he more common contaminating fungi have been 
identified and some of these are also opportunistic 
pathogens e.g. Absidia, Aspergillus, Mucor, Penicillium, 
Rhizopus, Rhodotorula, Scopulariopsis. Contaminating fungi 
may have very small pathogenic risk other than allergic 
reactions, but some of them are of great importance to the 
food and agricultural industry: Absidia, Alternaria, Botrytis, 
Cephalosporium, Fusarium, Gliocladium, Helminthosporum, 
Mucor, Nigrospora, Paecilomyces, Penicillium, Rhizopus, 
Rhodotorula, Syncephalastrum, Trichoderma, Verticillium. 

From the above information, the problem is choosing 
which fungi to illustrate as an aide-memoire. This has been 
resolved by including the following fungi genus based on 
their interesting visual shapes, as illustrated in Figure 14. 


The Oxoid Vade-Mecum of Microbiology, Mr. E. Bridson, 
Unipath Ltd, 1993. 


Alternaria 


@ Absidia 


Aspergillus Basidiobolus Blastomyces 


Figure 14 
Fungi genus identified by their various shape 
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Cladosporum Coccidioides Conidiobolus 


Epidermophyton Fonsecaea 


Fusarium Geotrichum Gliocladium 


Nigrospora Paecilomyces Paracoccidioides 


Penicillium Phialophora Piedraia 


Helminthosporum Histoplasma Madurella 


Malassezia Microsporum Mucor 
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Torulopsis Trichoderma 


Trichophyton 
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ABSTRACT 


Of all ship types, the chemical tanker arguably represents the 
most noteworthy example of advanced technology working 
successfully in combination with the traditions of maritime 
trade, which require sound design, robust construction, cargo 
flexibility, versatility of operation, innovation in service and 
a compatible regulatory framework. Lloyd's Register’s Rules for 
Chemical Tankers were first introduced in 1971, following a 
period of development which included essential consultation 
with industry. 

The pioneers of the trade anticipated many of the require- 
ments which are now the international norm, and innumerous 
ways the development of regulatory classification and statu- 
tory regimes has followed safe standards and _ practices 
developed by the chemical tanker industry. Concern for the 
environment from the outset is evident from early designs 
which provided complete segregation of the cargo tanks from 
the sea, but the advent of MARPOL 73/78 has produced rigor- 
ous operational pollution controls which place great demands 
upon chemical tanker designers and operators, cargo pump 
manufacturers and the suppliers of tank cleaning equipment. 
It is to the credit of all concerned that chemical tankers operate 
successfully within the framework of these controls, due in 
part to the influence of pragmatism upon regulators. 

Operational controls and the associated equipment can 
only attain the required objectives if the main containment 
envelopes — the structure of the cargo tanks and the hull of the 
ship — are carefully designed, satisfactorily constructed and 
adequately maintained. Equally, the systems on board for 
dealing with emergencies, such as the fire-fighting capabili- 
ties, must be effective if damage to the environment originating 
from a containable incident is to be avoided in service. 

Four ship examples are used in the paper to illustrate a 
number of containment features, including several basic 
aspects which are seldom presented for discussion in the 
context of protecting the environment. 

The international pollution control requirements applica- 
ble to chemical tankers were developed separately from the 
safety aspects, giving rise to some anomalies which would 
otherwise not exist. Progressive harmonization can be 
expected to reduce these over a period of time. Of greater inter- 
est and importance are fresh, industry-led inspection 
procedures, linked with the intended development of a qual- 
ity-rating system, and current pressures to consider the merits 
of formal safety assessment as an alternative to established 
prescriptive regulatory methods. The Authors consider that 
the overall service history of chemical tankers does not show 
serious technical evidence of a necessity for fundamental 
change in survey or regulatory procedures, and that these 
concepts require careful evaluation before any irrevocable 
decisions are made. 


Lloyd's Register Technical Association 


nN 


1. INTRODUCTION 


For the purposes of this paper, the environment may usefully 
be thought of in terms of the general definition ‘surroundings’. 
To the person onboard ship, the immediate environment is the 
ship itself, including the accommodation and working spaces. 
The ship operates within several close-environments, 
predominantly in port and in coastal or estuarial waters, and 
also in the much wider environment of the open sea. At all 
times, the atmosphere forms part of the wider environment. 
Each component of the ‘environment’ requires to be protected 
and imposes its own imperatives, but the requirements for the 
protection of each are not the same. For example, conventional 
safeguards which are essential to protect crew accommoda- 
tion on board against the ingress of hazardous cargo vapours 
make no material contribution towards the parallel objective 
of protecting the sea, the land or the atmosphere. Conversely, 
arrangements to eliminate the discharge of hazardous cargo 
residues into the sea will have no direct impact upon the 
protection of crew members from cargo hazards onboard. 
Itis of assistance to maintain an awareness of these differences, 
because the two principal sets of international regulations 
which govern chemical tanker design and operation have 
developed along somewhat separate lines. To a substantial 
extent, this is due to the influence of experience and industrial 
development. 

International awareness of the close-proximity hazards of 
carrying chemicals in bulk by sea predated the present wide 
appreciation of the overall environmental hazards. Had this 
not been the case, the regulations would almost certainly have 
had a different development history, and would possibly not 
have appeared in the form that they do today, with safety 
requirements which also contain a limited ‘environmental’ 
element being contained within SOLAS 74 and the wider 
hazards to the environment being addressed within MARPOL 
73/78, neither being independent of the other. 

The relative performance of chemical tankers in terms of 
both general safety and protection of the environment is good, 
as exemplified by the loss statistics for various types of ships 
shown in Table 1 (Ref. 1). This is a comparative record which 
the industry should take pride in maintaining. 

Specific figures for recent years are given in Table 2, from 
which it can be seen that the loss ratio has varied, but not inor- 
dinately. The figure for 1993 is one of the best and, for three 
of the fourteen years covered, zero losses occurred. It is reason- 
able to interpret the statistics as indicating that the principal 
threat from chemical tankers does not arise from loss of the 
ships, but from partial release of cargo liquids or vapours. 


Chemical tankers 
Liquefied gas carriers 
Container ships 
Ro-Ro cargo ships 


Oil tankers 


Refrigerated cargo ships 


Bulk carriers 
OBO and Ore/Oil carriers 


General cargo ships 


Table 1 
Average annual loss ratio per 1000 ships at risk (1980-93) 
(ships of 1,000dwt or over, all causes) 


Year Losses No. ships Loss ratio per 
at risk 1000 ships at risk 
0.0 
1981 1.4 
1982 4.7 
1983 0.0 
1984 1.0 
1985 0.0 
1986 0.9 
1987 0.9 
1988 1.7 
1989 4.1 
1990 2.3 
1991 Ee 
1992 Zr 
1993 Orr 
1994 0.0 


Average value 1.6 


Table 2 
Loss data — chemical tankers of 1,000dwt or over (all causes) 


The matter of liquid containment is, in principle, more 
easily addressed than that of vapour control. Materials in the 
liquid phase can be loaded, discharged and transported 
within enclosed systems. The possibility of release through 
collision or grounding can be addressed by standards which 
govern cargo tank location and ship survivability. Some 
degree of vapour release, on the other hand, is virtually 
inevitable, although controls must be applied. The normal 
diurnal expansion and contraction of cargo requires relief of 
pressure and vacuum effects if damage to conventional inte- 
gral cargo tanks is to be avoided, and pressures which arise 
during cargo handling procedures must also be relieved to 
atmosphere or contained by systems designed for the 
purpose. 

Whatever aspect of the environment is considered, the 
goals remain the same — to protect life, facilities and natural 
resources against avoidable hazards. Where chemical tankers 
are concerned, this means the avoidance of uncontrolled 
release of hazardous liquids and vapours as a consequence of 
operational procedures or accident, at sea or in port. The 
theory that ‘the night is long and the sea is deep’ has been 
outdated for many years, and the idea that unpleasant or 
harmful vapours should be tolerated in port is now equally 
unacceptable, particularly in developed, densely populated 
areas. 

Each aspect of the environment has unique features and 
is subject to new discoveries. The carcinogenic effects of 
several chemicals, although suspected, were not proven for 
many years. The incremental influence of liquid release into 
enclosed seas or ‘special areas’ was not widely appreciated 
until about twenty-five years ago, although the threat to the 
Great Lakes was recognised from a significantly earlier date. 
It is safe to predict that ambient temperature, humidity and 
other climatic effects will have an increasing influence upon 
controls over chemical tanker operations. Who could reason- 
ably expect exactly the same local considerations to apply to 
Baffin Bay in winter as to Baton Rouge in summer? 
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In addition, the hazardous characteristics of bulk chemical 
cargoes vary, individually and in combination, and the variety 
of cargoes is constantly increasing. It may be reasonable to 
argue that nowhere is there a more varied and intensifying 
challenge to maintaining the integrity of the environment than 
in the mobile, floating combination of generating station, 
hostel and chemical storage facility which comprises the 
modern chemical tanker. 


2. THE ESSENTIAL PRINCIPLES OF 
CHEMICAL CARGO CONTAINMENT 


In order to quantify the risk to the environment and the poten- 
tial health hazard to personnel which might arise from any 
form of transportation of hazardous liquids, it is necessary to 
examine and categorise the substances concerned in terms of 
their intrinsic physical and chemical properties. Procedures 
which govern the bulk shipment of such liquids by sea have 
been developed. These are outlined in Section 3 of the paper. 

The principal characteristics which must be considered 
include the toxic effects which release of cargo vapours or 
liquids could have on personnel involved in transportation 
and also upon the wider environment, including all forms of 
life which might be exposed. The cargo may be toxic by inhala- 
tion, by oral ingestion or by skin absorption. These effects need 
not require continuous exposure. For example, intermittent 
contact with a number of relatively familiar vapours such as 
benzene over an extended period is known to be harmful. 

Similarly, the irritant effect of the cargo vapour or cargo 
liquid must be considered, including the hazards associated 
with liquids which are corrosive to the skin and those which 
are skin sensitizers, leading to serious and possibly long-term 
effects. 

Even minor damage to a cargo tank, or limited overflow 
of the contents, can result in spillage into harbour or estuarial 
waters which may constitute a threat to domestic and indus- 
trial water supplies. Under these circumstances, the 
possibility of direct ingestion by humans or contamination of 
the natural food chain cannot be dismissed. For these and 
other reasons, the pollution potential of cargoes is of funda- 
mental concern. 

A more holistic measure of the potential pollution impact 
of asubstance on the environment can be determined by assess- 
ing the wider-reaching effects of accidental or operational 
release. Such a procedure must take account of the influence of 
noxious vapours upon the atmosphere, the likelihood of 
contamination of the sea or fresh water supplies resulting from 
liquid release, the threat of ingestion or absorption and the 
possibility of tainting or retention in increasing concentrations 
by local fauna. Reduction of amenities such as denial of access 
to, or use of, contaminated areas is another possible effect, as 
has been shown by various oil pollution incidents. 

The fire hazards associated with a number of chemicals 
are unconventional and environmentally harmful, for exam- 
ple the propensity of certain substances to generate large 
volumes of extremely toxic by-products of combustion. Addi- 
tional exceptional hazards must be considered, such as the 
tendency of chemicals to self-react, or to react with other 
substances, whether they form a constituent part of the 
containment system, the tank atmosphere, cargoes in adjacent 
tanks or ambient conditions. An example of an extreme case 
is phosphorus, where exposure to oxygen would trigger a 
dangerous chemical reaction, necessitating its carriage 
beneath a pad of water in specially shaped tanks to ensure 
constant submersion. 

The various hazards are additionally affected by the phys- 
ical properties of the substances. A cargo possessing a low 
boiling point or high vapour pressure may be prone to excessive 
boil-off, requiring special vapour containment features. The 
cargo freezing point or melting point must also be taken into 
account, not only to avoid solidification and maintain pumpa- 
bility, but also in the context of avoiding accidental or 
operational pollution. High melting point cargoes, if released 
into the sea, may be capable of producing floating chemical 
‘icebergs’. Also, a cargo which requires to be transported at a 
high temperature can impose substantial thermal loads on the 
hull of the ship. This aspect is addressed in Section 4 of the paper. 
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The relative density of a liquid cargo not only has a direct 
effect on the behaviour of the substance if released, but also 
determines, toa large degree, the structural configuration and 
tank arrangement of the vessel, due to the necessity to 
minimise liquid sloshing and the dynamic loading of tank 
boundaries. 

The corrosive effect of certain products on materials which 
form the cargo containment envelope or which are used in the 
construction of cargo systems is also of critical importance and 
requires the adoption of materials of construction which are 
virtually unique to chemical tankers. 

All of the above characteristics must be considered in the 
context of a range of operational marine hazards which are 
not confined to predictable matters such as corrosion, tank 
boundary loading, thermal stress, or even the dynamic effects 
of heavy weather. The additional risks of collision or ground- 
ing which have always accompanied marine transportation 
persist even today, despite improved navigational equipment, 
and are exacerbated by the consequences which would follow 
release of a hazardous cargo. With this is mind, it is of the 
utmost importance that a high degree of survivability is built 
into all tankers which are intended for the carriage of liquid 
chemical cargoes in bulk. 

Tankers have traditionally displayed a relatively high 
survivability standard following quite extensive damage and 
broaching of compartments. To ensure that adequate margins 
are maintained in the case of chemical tankers, fundamental 
principles must be applied in respect of longitudinal and 
transverse subdivision. These principles are realised by the 
application of specific damage stability criteria, together with 
safeguards against cargo outflow if damage occurs, as 
described in Sections 3 and 4 of the paper. 

The possibility of structural failure must also be consid- 
ered, although major incidents attributable to this cause are 
comparatively rare in bulk chemical tankers. However, tank 
boundary failure leading to rectification work being required 
before cargo operations can be continued is not an unknown 
occurrence. Such incidents can be categorised broadly as 
follows: 


Major failures: e.g. deformation or rupture of a cargo tank, 
usually due to overpressurisation or under- 
pressurisation. 


Minor failures: e.g. local fracture of a tank boundary weld. 


Other than the most disastrous of possible occurrences, 
suchasa major collision, grounding, fire or explosion, a signif- 
icant fracture of the hull envelope plating and supporting 
structure could present the greatest threat to survival of the 
ship and satisfactory containment of the cargo. Fortunately, 
significant hull fractures in chemical tankers seldom occur, 
but a number of such events have occurred on oil tankers 
during loading or discharging operations, lending emphasis 
to the necessity for comprehensive loading guidance to be 
provided on board. 

Two of the most well-known oil-pollution incidents have 
arisen from loss of steering or propulsive power. The best- 
known incident attributable to loss of steering was the 
grounding of a VLCC in 1978. The cause of the steering loss 
was failure of a pipe flange connection in the steering gear 
primary hydraulic circuit. In the circumstances, it proved 
impossible to repair the connection and re-charge the system 
before the vessel grounded, with disastrous results for the 
surrounding coastline. The subsequent enquiry, and resulting 
work carried out at IMO, brought forward significant changes 
in the regulations governing the design and construction of 
steering systems. Although primarily directed towards large 


crude carriers, they require the duplication of key systems in 
all tankers of 10,000 tonnes deadweight and over. 

A more recent event attributable to loss of primary propul- 
sive power was the grounding of a crude oil tanker in January 
1993. It has been reported that the origin of the incident was 
piping stowed alongside the accommodation which broke 
loose in heavy weather. The released pipes are understood to 
have damaged the vent pipe serving a fuel oil tank. The result- 
ing influx of seawater led to complete loss of propulsive 
power. The incident was followed by calls for ‘back-up’ 
propulsive systems, and recent discussions at IMO have 
centred on the possibility of providing duplication of essential 
systems related to the main propulsion plant. 

Several recent chemical tanker designs developed in 
advance of the latter incident have incorporated secondary 
propulsion systems witha ‘get you home’ capability, for exam- 
ple, shaft powered generators which can also function as a 
propulsion motor powered by the vessel’s diesel generator 
sets. More interestingly, a recent design incorporates a 
retractable azimuthing thruster which is capable of providing 
both emergency propulsive power and steering capabilities. 
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3. THE METHODOLOGIES OF CONTAINMENT 


Realisation of the essential principles of cargo containment 
outlined above cannot be achieved by a random process. A 
systematic approach is required if consistency and reliability 
of standards are to be achieved. This philosophy has charac- 
terised Lloyd’s Register’s Rules for chemical tankers since 
they were first introduced in 1971, in advance of the adoption 
of standards at IMO in 1972. 

At present, the primary international instrument of regu- 
latory control over chemical tanker design and construction 
is the International Code for the Construction and Equipment of 
Ships Carrying Dangerous Chemicals in Bulk (the International 
Bulk Chemical Code or ‘IBC Code’ — Ref. 2), developed at IMO. 
The purpose of the IBC Code is to ensure safe standards of 
chemical tanker design, construction and equipment, the basic 
philosophy being one of ship types related to the hazards of 
a large number of chemicals which are listed as being within 
its scope. 

In 1983, the IBC Code was incorporated into the Interna- 
tional Convention for the Safety of Life at Sea, 1974 (SOLAS 74), 
andchemical tankers constructed on or after 1st July 1986 must 
comply with its provisions. Prior to the IBC Code, an earlier 
set of recommendations had been developed at IMO. These 
recommendations were contained, and in an updated form 
remain, in a publication known simply as the Code for the 
Construction and Equipment of Ships Carrying Dangerous Chem- 
icals in Bulk (the Bulk Chemical Code, or ‘BCH Code’ — Ref. 3). 
Compliance with the BCH Code was not mandatory on an 
international basis, although a number of National Authori- 
ties adopted it and the majority of chemical tankers 
constructed following its introduction in 1972 complied with 
its major requirements. This paper addresses only new ships 
which are required to comply with the IBC Code. Therefore, 
the BCH Code will be disregarded for present purposes and 
where ‘the Code’ is referred to, it means the IBC Code in all 
cases. 

The liquids covered by the Code are stated to be those 
having a vapour pressure not exceeding 2.8 bar absolute at a 
temperature of 37.8°C, effectively excluding liquefied gases, 
which are dealt with in the International Code for the Construc- 
tion and Equipment of Ships Carrying Liquefied Gases in Bulk (the 
International Gas Carrier Code or ‘IGC Code’ — Ref. 4). Petroleum 
and other products which do not represent an increased fire 
hazard, or present significant hazards in addition to or other 
than flammability, are also excluded from the Code. This 
means that cargoes such as naphtha solvent may continue to 
be carried on ships which comply with internationally 
accepted oil tanker requirements, without additional chemi- 
cal tanker safeguards. 

As a consequence of incorporation into SOLAS 74 and 
widespread application to new chemical tanker construction, 
the contents of the Code are now widely understood. There 
is no necessity to repeat these in detail in the present paper, 
but a description of the methodologies which are identifiable 
with the provisions of the Code is an appropriate aid to under- 
standing the regulatory philosophy which it represents. 

The Code provides for the issuance of an International 
Certificate of Fitness for the Carriage of Dangerous Chemicals 
in Bulk, upon which are listed the products which the ship is 
permitted to carry, together with relevant conditions of 
carriage. This certificate, which is issued by, or on behalf of, 
the National Administration of the country in which the ship 
is registered, is internationally recognised as evidence that the 
ship complies with the Code. LR’s Rules and Regulations for the 
Classification of Ships (Ref. 5), ‘the Rules’, also require that a 
defined list of cargoes be attached to the Classification Certifi- 
cate for a classed chemical tanker. 


The characteristics of the products concerned are taken 
into account in two ways in the Code - firstly to assess the 
degree of overall hazard to the environment which would 
result from uncontrolled release of a given chemical and the 
degree of damage survivability which should be inherent in 
its means of transportation, secondly to assign containment 
and protection requirements specific to the nature of the 
particular hazards. Three ‘Ship Types’ (1,2 and 3) are provided 
for. The most significant characteristic of the three types is the 
ability to survive specified extents of damage, whilst prevent- 
ing or limiting resultant release of the cargo, which the Code 
recognises to be a paramount design consideration. 

The substances which are required to be carried on a Type 
1 ship are those which if released would have very severe envi- 
ronmental and safety effects. A substance which possesses 
similar characteristics, but toa lesser total extent than is appro- 
priate to a Type 1 ship, may be carried on a Type 2 ship. A 
Type 3 ship is intended for the least hazardous substances 
within the scope of the Code, but even these lesser hazards 
may be significant. Each chemical is assigned to one of the 
three ship types, according to the overall hazard which 
carriage of the substance represents. 

The ship type criteria are supplemented by permissible 
cargo tank locations and certain minimum standards which 
govern cargo containment and ship arrangement. These 
requirements constitute a general level of safety which must 
be attained irrespective of the specific hazards of the various 
chemicals which are to be carried. Additionally, ‘special’ 
requirements apply to a number of individual chemicals and 
a range of defined hazards. For example, specific require- 
ments are set for the carriage of propylene oxide, carbon 
disulphide and other particularly hazardous substances, 
together with material and containment standards for mineral 
acids, requirements for highly toxic products, inhibited 
substances and high vapour pressure cargoes. 

The basic cargo hazards addressed in the Code are iden- 
tified as the fire hazard, the health hazard, the water pollution 
hazard, the air pollution hazard, the reactivity hazard and the 
marine pollution hazard. The reference to the water pollution 
hazard relates primarily to the local effects of cargo tank 
rupture or spillage and the provision of overflow protection. 
The distinction between this and ‘marine pollution’ is princi- 
pally attributable to the historical development of the Code 
and other relevant requirements. These provisions are general 
and, for practical purposes, are subordinate to specific criteria 
for hazard evaluation which are included in two separate 
sections of the Code, one dealing with the safety hazard and 
the other with the marine pollution hazard. 


3.1 Hazard Evaluation for Safety Purposes 


Itis apparent from examination of the safety criteria for assign- 
ment of Ship Type which are incorporated in the Code that 
inhalation is regarded as being the most probable route of 
exposure to toxic substances on board ship. Hazardous 
vapours are almost invariably present in the vicinity of the 
cargo tanks and the hazard is substantially increased during 
cargo handling operations. The vapour hazard is also the least 
controllable in relation to vicinities separate from, but adjacent 
to, a chemical tanker engaged in cargo handling operations. 
Such vicinities may include industrial or residential areas and 
other ships moored alongside, engaged in lightering or 
bunkering operations. The second most likely route of expo- 
sure for shipboard personnel is by skin contact, since ingestion 
is less likely to occur by accident. 

From the fire safety aspect, a low flash point or a wide 
flammable range alone is not considered to bea basis for inclu- 
sion of a product, which has resulted in methyl alcohol 
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(methanol) being designated as a chemical to which the Code 
does not apply, although from time to time proposals have 
been made for its re-categorisation on the basis of its 
flammable range (5.5 to 36.5%), in association with a flash 
point of 10°C to 13°C. 

Where flammability characteristics render a chemical 
extremely hazardous, whether enclosed in a cargo tank or 
unconfined (i.e. in the event of spillage), special safeguards 
must be applied in recognition of the increased hazard. In 
some instances, the flammability hazard might be exacerbated 
by a relatively low auto-ignition temperature, which repre- 
sents an additional problem in a fire situation although the 
fire may not initially involve that product, or by the formation 
of peroxides in the presence of oxygen. An example is diethyl 
ether, to which rigorous special requirements apply. 

For fire extinguishing purposes, the Code provides for 
alcohol-resistant foam, ‘regular’ foam (encompassing all non- 
alcohol resistant foams, including certain fluoroprotein and 
aqueous film forming foams), water spray and dry chemical, 
indicating ina summary of minimum requirements (Chapter 
17) which of these media are considered to be suitable for each 
flammable product. 

Chemical reactivity also significantly influences arrange- 
ments on board a bulk chemical tanker. The Code and the 
Rules go to considerable lengths in order to ensure segregation 
of cargo tanks and piping systems for inter-reactive 
substances, addressing in addition water reactivity, by requir- 
ing separation from the sea where appropriate (e.g. oleum); 
also self-reactivity, for example by requiring that a cargo 
should be inhibited for carriage (e.g. isoprene and styrene 
monomer); and corrosive effects by requiring special materi- 
als of construction (e.g., formic acid). 


3.2 Hazard Evaluation for Marine Pollution Purposes 


The avoidance of marine environmental pollution arising 
from the bulk carriage of liquid chemicals (noxious liquid 
substances) is addressed in Annex II of the International 
Convention for the Prevention of Pollution from Ships, (MARPOL 
73/78 —Ref. 6), Annex I being devoted to oil pollution preven- 
tion. Annex II to the Convention applies to the list of chemicals 
covered by the Code. The Annex uses a definition of liquid 
substance which corresponds to the vapour pressure limita- 
tion given in the Code (2.8 bar at 37.8°C) and provides for the 
issuance of an International Pollution Prevention Certificate 
for the Carriage of Noxious Liquid Substances in Bulk (‘NLS 
Certificate’). 

Annex II deals primarily with the prevention of opera- 
tional (‘intentional’) pollution, i.e. that which might arise from 
the discharge of tank washings or cargo residues to the sea, 
and cargoes which have been deemed to be within its scope 
are categorised as Type A, B, Cor D, in order of reducing overall 
hazard. This categorization is determined on the basis of guide- 
lines produced by the Group of Experts on Scientific Aspects 
of Marine Pollution (GESAMP), which take account of the 
tendency of the cargo to bioaccumulate (when an aquatic 
organism absorbs a chemical so that it contains a greater 
concentration than is present in the ambient water or its own 
food), also the potential for damage to living resources, the 
hazards to human health and the reduction of amenities which 
could occur from release of the substance into the environment. 

Under Annex II, strict limitations are placed upon the 
quantities and mixture concentrations which may _ be 
discharged to the sea after tank washing or other procedures, 
and operational requirements are prescribed which are 
intended to ensure effective dissemination of discharged 
residues into the wake of the ship. Implementation of these 
requirements has encouraged efficiency in the design and 


installation of cargo pumping arrangements in order to 
minimise cargo residues remaining in tanks and associated 
piping systems. One of the most significant technical improve- 
ments which has resulted from Annex II derives from 
Regulation 13, which requires compliance with the Code and, 
therefore, assignment of a Ship Type (1, 2, or 3) related to pollu- 
tion characteristics. This has necessitated that suitable 
additional hazard evaluation criteria be included in the Code. 


3.3 General 


There are elements of inconsistency in the hazard evaluation 
techniques which are employed in order to define the ship 
type and particular containment requirements for specific 
chemicals based upon ‘safety’ and ‘marine pollution’ criteria. 
Water pollution is presented in the Code as though this might 
be a hazard which is distinct from marine pollution. Also, the 
severity of operational discharge limitations for a given chem- 
ical is not necessarily reflected in the criteria governing ship 
type, which is the principal safeguard against gross accidental 
pollution. For example, o-chlorotoluene, a Category A 
substance, is permitted to be carried on a Type 3 Ship. These 
inconsistencies have arisen principally as a consequence of 
the fact that the Code safety hazard criteria were formulated 
to take account of onboard and local environmental threats, 
prior to Annex II having been developed in its present form. 

Many new cargoes are offered for shipment at short notice, 
and must be given a rapid ‘provisional assessment’. This is 
normally done by the three National Authorities involved in 
the shipment, namely the Administrations of the shipping and 
receiving countries, together with the Administration of the 
country in which the ship is registered. Once the provisional 
assessment has been agreed, the cargo may be transported. 
The Administrations involved in the provisional or ‘tripartite’ 
assessment are required to advise IMO of the relevant details. 
The chemical is then added to a list of tripartite cargoes held 
by IMO pending formal assessment by GESAMP and subse- 
quent inclusion in the Code. 

There are, of course, products such as a range of insecti- 
cides, polychlorinated biphenyls and substances such as 
ethyleneimine which have been deemed too hazardous for 
carriage in bulk to be sanctioned. This must be borne in mind 
as an additional consideration in instances where the criteria 
for hazard evaluation indicate a Ship Type 1 to be required. 
At present, Ship Type 1 is stipulated for only a very small 
proportion of the chemicals covered by the Code. 

In common with the remainder of SOLAS 74, the Code 
contains only limited detailed guidance as to how its objec- 
tives are to be achieved in the design, construction and service 
phases, relying principally upon internationally accepted 
standards of equipment, construction and survey which are 
defined elsewhere. Fora chemical tanker which is classed with 
Lloyd’s Register, or a newbuilding in respect of which LR class 
is contemplated, the Rules (Ref. 5) provide detailed guidance 
and a list of cargoes for which the ship is approved is attached 
to the Classification Certificate. 

The methodologies outlined above are illustrated in Fig. 1. 
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4. DESIGN EXAMPLES 


Four ship examples designated A, B, C and D in order of 
increasing size, have been selected to illustrate a number of 
modern chemical tanker concepts and the means by which 
compliance with certain aspects of statutory and classification 
requirements is achieved, in practice. Outline particulars are 
given in Fig. 2. Each example is modelled upon an actual 
design, but a number of particulars have been adapted to suit 
the purposes of the paper. Where particular features are 
mentioned for one example ship only, this does not imply that 
the others are equipped or designed to a lesser standard. Each 
model is a highly sophisticated ship which is capable of carry- 
ing very many chemicals with confidence in respect of 
maintaining safety and cargo quality. 

Of the four examples, C and D have a hull configuration 
with subdivision arrangements which, in principle, could 
comply with Ship Type 1 requirements, although relatively 
few ships have been constructed to this standard. The side 
shells of examples B and C are cargo wing tank boundaries, 
which means that the outboard tanks are limited to the 
carriage of cargoes designated as being suitable for a Type 3 
ship. However, to restrict these two designs to this standard 
overall would unduly limit the range of permissible cargoes, 
asa large proportion of available chemicals requires Ship Type 
2 containment, and would also fail to take advantage of the 
fact that the remaining cargo tanks are completely segregated 
from the sea. Therefore, for practical purposes, these two 
examples may be considered to be Type 2 ships, the cargoes 
requiring this standard of containment being prohibited from 
carriage in the wing tanks. Ship A conforms to a conventional 
Type 2 configuration for a vessel of this size. Each of the four 
examples could readily be approved for the carriage of several 
hundred bulk liquid cargoes possessing widely disparate 
chemical and physical properties. 

Many chemical cargoes are capable of being transported 
in suitably coated and maintained tanks constructed of mild 
steel, but there is no doubt that the major chemical tanker oper- 
ators elect for a large proportion of stainless steel tankage. 
Therefore, for purposes of illustration, it will be assumed that 
all of the cargo tanks in each of the four examples have stain- 
less steel boundaries, with the exception of those tanks which 
extend to the side shell in examples B and C, and a number of 
wing tanks in example D as identified in Fig. 2(d). Equally, it 
could be argued that conventional product tanker pumping 
arrangements would facilitate the carriage of numerous 
chemicals, but no owner who wishes to offer a new ship for 
the carriage of a wide range of available chemical cargoes 
would adopt such an arrangement. Accordingly, the four 
examples are considered to have individual pumps in each 
cargo tank, as is common for chemical tankers built in accor- 
dance with the Code and the Rules (Refs. 5(a) and 5(c)). This 
also eliminates the operational hazards which have historically 
been associated with cargo pump rooms, and which are exac- 
erbated where a range of chemical cargoes is contemplated. 

These, and other relevant matters, are examined in greater 
detail below. 


4.1 Damage Assumptions and Location of Cargo Tanks 


The ships must be able to withstand the extent of damage indi- 
cated in the Code for various hull positions. It will be noted 
that the extent of damage which must be survived by a ship 
is not dependent on Ship Type; however, the locations where 
the damage is considered to occur are dependent on Ship Type, 
Types 1 and 3 being the most and least onerous respectively. 
The final equilibrium angles of heel and trim and the final 
waterline following damage must be within limits which are 
also defined in the Code. 
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Figure 1: Influence of chemical cargo characteristics on ship design and certification 
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In order to remain intact following the maximum theoret- 
ical extent of collision and grounding damage, the boundaries 
of cargo tanks intended for the carriage of cargoes which 
require Ship Type 1 containment must be positioned at least 
B/5 or 11.5 metres, whichever is the lesser, inboard of the side 
of the ship at the summer loadline and the lesser of B/15 or 6 
metres above the moulded bottom line at centre. Additionally, 
the cargo tank longitudinal boundaries are not permitted to 
be closer than 760mm to the shell plating at any point. For 
Ship Type 2 containment, the tank bottom location require- 
ment is the same, but the cargo tank side boundaries are only 
required to be a minimum of 760mm from the side of the ship. 
This limited degree of side protection is intended to prevent 
cargo loss from minor or low energy collisions. For Ship Type3 
containment, cargo may be carried adjacent to the shell plating. 

The double-skin areas on examples A and D are ballast 
tanks, as are the double bottoms under the cargo tanks on all 
four ships. For the purposes of the paper, Ship D has been 
assumed to have deck tanks in addition to the main cargo 
tanks (Fig. 2(d)). The deck tanks are in a position which is suit- 
able for cargoes requiring Ship Type 2 containment. 

The effect of the idealised damage penetration occurring 
amidships is illustrated in Fig. 3 for each of the four examples. 
Theoretically, no cargo loss would arise from low energy side 
contact for ships A and D, but this type of damage could result 
in wing tank cargo requiring Ship Type 3 containment being 
released from ships B and C. The maximum theoretical extent 
of collision damage penetration could result in spillage of 
cargoes designated for carriage ina Type 2 ship from Examples 
A, B and D, but as the centre tanks would not be penetrated 
on Example C, only cargo requiring Ship Type 3 containment 
would be released by even B/5 penetration of this ship. 


4.2 Ship Arrangements 


In addition to protection against the effects of grounding and 
collision, cargoes must be adequately segregated from loca- 
tions where the crew are required to live or carry out work 
other than cargo operations, and also from any spaces which 
contain potential sources of ignition. Similarly, the crew and 
systems which are unrelated to the cargo must be protected 
from hazards such as toxic vapours and highly corrosive 
liquids. These features are exemplified by all of the designs 
considered in this paper, and Ship A has been selected for the 
purpose of illustrating the most essential aspects (Figs. 4(a) 
and 4(b)). 

The most fundamental safeguard relates to the location 
and separation of spaces. At the forward and aft end of the 
cargo tanks, a complete cofferdam is fitted to provide a phys- 
ical barrier in the event of a leak developing in the forward or 
aft cargo tank boundary bulkheads and to limit the effects of 
heat transfer in a fire situation. The Code contains no specific 
requirements concerning the minimum length of the coffer- 
dam, but in order to satisfy other requirements of SOLAS 74 
and the Rules (Ref. 5(b)), the length must be not less than 
760mm and there must be sufficient internal clearance 
throughout to permit access for inspection and maintenance. 
The part of the ship which comprises the cargo tanks, the adja- 
cent spaces and the deck over corresponds to the cargo area, 
as defined in the Code and the Rules (Ref. 5(a)). 

Historically, casualty incidents have tended to confirm the 
natural assumption that the forward area of a ship is the most 
vulnerable to collision damage. Therefore, the accommoda- 
tion and navigational control positions on chemical tankers 
must be located aft of the cargo area, together with essential 
machinery systems. 

In order to ensure that hazardous toxic or flammable 
vapours are kept away from the crew accommodation and 
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non-cargo working spaces which might contain potential 
sources of ignition, the Code and the Rules (Ref. 5(a)) do not 
permit entrances, air inlets and openings into these spaces to 
face the cargo area or to be located in the sides of the accom- 
modation block within a distance of 0.04L from the forward 
bulkhead, subject to upper and lower limits of 5 metres and 
3 metres. Windows and side scuttles in these regions must be 
non-opening, and those in the first tier are required to be 
provided with steel covers on the inside. The areas affected 
by this requirement are shown in Fig. 4(b). 

Control stations and service spaces as defined in the Code 
are not permitted to be installed within the cargo area. The 
cargo control room is frequently located within the aft erec- 
tion, at its forward end, whilst spaces such as paint stores are 
generally positioned forward of the cargo area. However, 
control rooms and store rooms are permitted to have direct 
access to the cargo tank deck provided certain safeguards are 
adopted, including the absence of ignition sources and 
complete segregation by vapour-tight and fire-resistant 
boundaries from areas of the ship such as the engine room 
and accommodation. 

In lieu of fitting an aft cofferdam, a suitably equipped and 
protected pump room may be used to provide the necessary 
separation between the cargo tanks and ‘safe’ spaces such as 
the engine room. A ballast pump room is arranged in this posi- 
tion on Ship C (Fig. 2(c)). In principle, tanks which are 
intended for water ballast, wash water or oil fuel are also 
permissible alternatives to a cofferdam, provided the range of 
cargoes carried in adjacent tanks is limited accordingly. For 
example, water-reactive cargoes are not permitted in cargo 
tanks which have a common boundary witha tank containing 
water and severely toxic cargoes are not permitted next to an 
oil fuel tank. 


4.3 Hazardous Locations and Associated Arrangements 


The principles of protection described above are translated 
into a workable system for use in ship design, firstly by iden- 
tifying hazardous locations, and secondly by setting 
requirements relevant to these locations. 

From the electrical aspect, the hazardous locations are 
defined in the Code and the Rules (Ref. 5(a) and 5(d)). These 
are essentially the cargo area, including a gas blanket of defined 
height, zones on the open deck within specified distances of 
the ends of the cargo tanks and possible cargo liquid or vapour 
outlets, and other spaces with openings so arranged as to 
permit the ingress of cargo liquids or vapours. Fig. 4(a) indi- 
cates the electrically hazardous locations for Ship A. 

Having defined the extent of the electrically hazardous 
locations, it is necessary to match the equipment which must 
operate safely in these areas with the cargoes intended for 
carriage. The apparatus groups and temperature classes 
defined in Ref. 7 are utilised for this purpose. 

There are three apparatus groups ranging from Category 
IIA to IIC, and six temperature classes ranging from T1 to T6. 
Categories IIC and T6 are the most severe, as applicable to 
carbon disulphide for example, whereas a cargo correspond- 
ing to categories IIA and T1, such as phenol, is one which can 
less readily be ignited and is able to tolerate a higher compo- 
nent surface temperature. There is no direct relationship 
between gas grouping and temperature class; for example, 
when electrical equipment is necessary for operational 
reasons in an area where hydrogen could be present, IIC T1 
equipment is required. Conventional oil tankers are required 
to be fitted with category IIA T3 equipment. Ship D is 
equipped to IIB T5 standard. 

The above restrictions do not preclude the use of intrinsi- 
cally safe systems in hazardous locations, and the Code 
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Figure 2(b): Ship B 
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Figure 2(c): Ship C 
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Breadth moulded = 32.0 m 
Depth moulded =14.0m 
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-—— -—_ Theoretical collision and grounding damage penetration 
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Figure 3: Effect of damage on cargo release 


particularly recommends this arrangement for measurement, 
control and communication purposes. The possibility of 
sparking arising from mechanical contact in service must be 
taken into account in the choice of materials used in the manu- 
facture of rotating machinery. Ventilation fan impellers 
require to be manufactured from an inert material for this 
reason. To exclude the possibility of ignition of flammable 
vapours, fan motors are required to be certified as being safe 
for the vapours likely to be encountered, and be located 
outside the ventilation trunking. The fans themselves are 
required to be of the non-sparking type. 

In practice, the extent of hazardous locations is compli- 
cated by the provisions of the Code and the Rules (Ref. 5(a)) 
in respect of vapours which are a health hazard. The most 
notable effect is to increase the hazardous radius surrounding 
a cargo tank vent outlet for severely toxic cargoes such as 
aniline, as also indicated in Fig. 4(a). 

All spaces within the cargo area are required to be acces- 
sible directly from the upper deck, except that access to double 
bottom spaces may be via a cofferdam, pump room, pipe 
tunnel or similar compartment. In general, dual access is 
required to confined spaces and those of cellular construction. 
The structural arrangements and sizes of openings must be 
such as to permit a man wearing breathing apparatus to pass 
and to enable an injured person to be removed to the open 
deck by stretcher. For horizontal openings, the minimum 
acceptable size is 600 x 600mm, whilst for vertical openings a 
minimum of 600 x 800mm is required. 
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In the case of example A, the wing and double bottom 
ballast tanks are common on each side of the ship. Access is 
provided directly from the upper deck. For Ship B, access to 
the double bottom tanks is via a centreline duct keel which, 
in turn, is accessed via the end cofferdams and a vertical trunk 
at about the mid-length of the cargo area. Interestingly, this 
ship was designed with a trolley running on longitudinal rails 
within the duct keel. Aft of No. 1 tank, Ship C also has a duct 
keel which gives access to the port and starboard double 
bottom tanks. A vertical trunk is arranged directly from the 
upper deck to the duct keel at every cargo tank bulkhead 
except those at the extreme forward and aft ends. The cargo 
area cofferdams and ballast pump room are provided with 
direct access from the upper deck. In the case of Ship D, which 
does not havea duct keel although twin double bottom girders 
are arranged to provide support for both flanges of the centre- 
line bulkhead corrugations, access is provided directly from 
the upper deck to all cofferdams and water ballast spaces 
within the cargo area. 

Enclosed spaces which contain cargo handling equipment 
and similar spaces in which work is performed on the cargo, 
must be provided with a fixed ventilation system capable of 
achieving at least thirty air changes per hour, or for specific 
toxic cargoes such as benzene, a minimum of forty five air 
changes per hour. The internal openings to the system are 
required to be positioned such that air is circulated throughout 
the space. The external inlets and outlets must be positioned 
such that they have sufficient separation to avoid recirculation 


High velocity vent 


Sg ee lien 


See fig. 4(b) 


Bs velocity vent 


[4] Hazardous locations for electrical equipment. (Hazardous zone above deck and around tank 


openings is increased to 4.5 m for certain cargoes.) 


+ Ventilation outlets of cargo tanks containing toxic products to be at least 15 m from openings 
to the accommodation, service spaces and machinery spaces 


VY Ventilation outlets of cargo tanks fitted with controlled venting to be at least 10 m measured 
horizontally from entrances and air inlets to the accommodation, service spaces, machinery 


spaces and sources of ignition 


Figure 4(a): Ship arrangement and hazardous zones — Ship A 


of contaminated air. The outlets should also be sited at least 
ten metres away from all openings to the superstructure, 
engine room or other ‘safe’ spaces. The example ships all 
utilise cargo pumps located within the actual cargo tanks and 
do not, therefore, contain cargo pump rooms or similar spaces. 

Enclosed spaces within the cargo area which are normally 
manned but which do not contain cargo handling equipment, 
such as the ballast pump room on Ship C, are required to have 
ventilation systems capable of providing at least twenty air 
changes per hour. Spaces which are not required to be 
manned, such as double bottom tanks and cofferdams, must 
have a fixed ventilation system providing at least eight air 
changes per hour or portable fans capable of providing not 
less than sixteen air changes per hour. To satisfy this and other 
operational requirements, Ship C, for example, is equipped 
with 3 portable seawater-driven fans, each with a ventilation 
capacity of 12,500 m3/hr. 
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4.4 Cargo Tank Types 


In addition to specifying the general layout of a chemical 
tanker, the Code and the Rules (Ref. 5(a)) provide guidance 
on acceptable types of cargo tank. Two basic types of tank are 
permitted, namely ‘Integral’ and ‘Independent’ tanks. An 
integral tank is one which is contiguous with, and contributes 
directly to the strength of, the hull structure. An independent 
tank is completely separate from the hull structure and does 
not contribute to the strength of the ship, or share the loads 
imposed upon the hull by the sea. If an independent cargo 
tank is designed to withstand an internal pressure in excess 
of 0.7 bar gauge, it is a ‘pressure tank’. Tanks with design pres- 
sures not exceeding 0.7 bar gauge are ‘gravity tanks’ and may 
be of the integral or independent type. 

At present, none of the cargoes which are covered by the 
Code or the Rules (Ref. 5(a)) are suitable solely for pressure 
tanks, but a number, such as ethylene oxide/ propylene oxide 
mixtures, may be carried in gravity tanks only if the tank is 
independent and the cargo is cooled. 


Ea A60 Insulation required on boundary facing 
cargo area and for 3 m aft of this boundary 
« No openings permitted within 4%L from the bridge front 
(not less than 3 m but need not exceed 5 m) 


Figure 4(b): 
Accommodation front arrangements — Ship A 


The facility to transport relatively small parcels of 
specialised cargoes can be obtained by installing deck tanks 
(Figs. 2(d) and 3). This means of increasing cargo flexibility 
without increasing the overall size of a ship is frequently 
adopted, either from the outset of construction or whilst in 
service. Deck tanks, which may require to be insulated, 
depending on the intended area of service and cargoes, are 
usually of the cylindrical gravity type, secured to transverse 
cradles and, as such, are substantially independent of the hull 
of the ship. However, tanks in this position may be subjected 
to significant external loading and internal dynamic forces, 
particularly if partial filling is contemplated. These factors 
must be considered both in the design phase and when select- 
ing cargoes in service. 

The Code specifies that independent tanks should be used 
for a number of cargoes which have high relative densities, 
for example hydrochloric acid (up to 2.1). Such cargoes are 
capable of imposing major static and dynamic forces on the 
tank boundaries and these forces must be transmitted into the 
hull structure via supporting arrangements which do not 
normally provide an even distribution of loading. Therefore, 
for such cargoes, the Rules (Ref. 5(a)) permit use of a type of 
tank described as ‘separate’. This is a gravity tank which is 
not fully integrated into the hull structure but has a limited 
degree of attachment, for example to transverse primary 
members only, as necessary to ensure satisfactory transmis- 
sion of the loads experienced in service. However, for cargoes 
such as molten sulphur and liquid phosphorus, which 
combine high relative density and high temperature of 
carriage, there is no alternative to a fully independent tank, 
requiring rigorous structural analysis of the tank, the support- 
ing arrangements and the hull. 

All of the cargo tanks on the example ships are integral 
gravity tanks, with the exception of the deck tanks on Ship D. 


4.5 Cargo Pumping, Piping and Related Systems 


In order to ensure that chemical cargoes are loaded, stored 
and discharged in a safe manner, the Code and the Rules 
contain requirements related to the cargo handling equip- 
ment, including cargo pumping systems, cargo temperature 
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and environmental control systems, tank venting, gauging, 
high level alarms and overflow control. Additionally, Annex 
II contains stringent requirements related to the discharge and 
stripping of cargo tanks, and the subsequent cleaning and 
disposal of water mixtures containing cargo residues. 

The cargo pumping system must be constructed of a mate- 
rial which is compatible with, and resistant to, the cargoes 
carried. The standard acid resistant stainless steel used on 
chemical tankers is AISI 316, and indeed all the ships consid- 
ered utilise this material for the construction of their cargo 
pumps, valves and associated piping systems. Other stainless 
steels which are commonly used include AISI 316L, which has 
a low carbon content. Pumping and piping components are 
also available in other grades of stainless steel, such as AISI 
317L and AISI 304L. The arrangement of the piping system 
must be such that the design pressure cannot be exceeded. In 
any situation where, by virtue of the arrangements, it is possi- 
ble to isolate a section of piping from the relief valve, the 
piping in this area must be designed for at least the greatest 
of the relief valve setting on the cargo pump, the maximum 
pressure head which can be generated by the cargo pumps, 
and the vapour pressure of the cargo at 45°C. 

As required by the Code and the Rules, all cargo pipe joints 
on each of the four ships are welded, with the exception of 
those to valves or expansion pieces. Whilst, in principle, cargo 
piping is permitted to be located below the upper deck 
provided certain safeguards are achieved, it is almost invari- 
ably arranged on the tank deck as for Ships A, B, C and D. Of 
the four examples, Ships B and C have duct keels which are 
used for the ballast and bilge piping systems, but not for cargo 
piping. 

The cargo piping is not permitted to enter any other 
enclosed spaces such as the engine room or superstructure, 
and must be installed inboard of the damage penetration 
limits defined in the Code. 

The basic principle of Annex II is that the cargo must be 
discharged until there is virtually no residue left on board. For 
pollution category A cargoes, which pose the greatest threat 
to the marine environment, all cargo residues must be 
discharged to shore reception facilities, hence no maximum 
allowable residue quantities need to be specified in the Annex. 
For category B and C cargoes, where the cargo residue may, 
under certain conditions, be discharged to the sea, the maxi- 
mum residue quantities per tank for new ships are 100 and 
300 litres respectively. The design figures are verified by tests 
of the stripping system which are carried out prior to the ship 
entering service. Category D cargoes, which pose the lowest 
threat to the marine environment, are not required to comply 
with a predefined stripping standard. To enable the ship to 
carry the widest range of cargoes possible, modern chemical 
tankers are designed to meet the 100 litre criterion. This being 
the case, they will be able to carry all categories of MARPOL 
Annex II pollutant. 

The 100 litres of residue criterion specified for the carriage 
of pollution category B cargoes includes the residue left in the 
tank and associated cargo pumping and piping system follow- 
ing discharge and subsequent stripping. Modern chemical 
tankers are designed from the outset with efficient stripping 
in mind and wherever possible the cargo tanks are smooth- 
walled, the bulkheads being either corrugated or provided 
with stiffening located in the adjacent ballast spaces or coffer- 
dams. To promote good drainage the ship may be trimmed 
and heeled for cargo stripping in order that the cargo drains 
to the suction well. The bottom of the cargo tank may also be 
sloped to aid this process as, for example, in the case of Ship C. 

The clearance between the impeller of a submerged pump 
and the bottom of the suction well can be as little as 20mm, 
resulting in virtually complete drainage of the cargo tank. 


The cargo left in each pump and its associated piping can be 
stripped to shore by blowing air or nitrogen through the 
system. Using this arrangement, residue quantities in the 
region of 50 litres per tank are achievable on all of the ship 
configurations considered in this paper. 

Ship A has been fitted with submerged stainless steel 
cargo pumps powered by electric motors located on the cargo 
tank deck. A stainless steel shaft, which runs from the motor 
through the full depth of the tank, is used to drive the pump 
impeller. A shaft such as this can be quite long and requires 
to be supported, by bearings, at regular intervals to prevent 
torsional and whirling problems. During cargo tank stripping 
and tank washing the bearings may be required to run without 
lubrication and are, therefore, subjected to high wear which 
can subsequently pose maintenance problems. One advan- 
tage of this type of pump is that there is no risk of 
contamination of the cargo from the driving medium as may 
be the case with hydraulic drives. The materials, e.g., rubber 
packing, and the clearance of the rotating parts have been 
designed for cargoes with a maximum temperature of 100°C; 
however, the maximum cargo temperature considered for this 
example is 85°C, which allows a margin of safety against over- 
heating of components. 

In the case of Ship B, the submerged stainless steel cargo 
pump impeller is driven by an hydraulic motor. The pump 
stack consists of two concentric pipes located one inside the 
other. The inner pipe takes high pressure hydraulic oil to the 
motor, whilst the outer returns the low pressure oil to the deck. 
This oil is then returned to the power pack located in the fore- 
castle. To ensure that hydraulic oil does not leak into the cargo, 
and conversely that cargo does not contaminate the oil, the 
pump stack is surrounded by a tubular cofferdam which is 
purged with air or nitrogen prior to use. This pumping system 
has the advantage that it utilises a short shaft with oil lubri- 
cated bearings, hence the probability of mechanical failure is 
low. The pump stack contains no valves or moving parts other 
than the hydraulic motor and the pump impeller, hence the 
probability of system failure is also low. 

For both types of submerged pump described above, the 
removal of a pump from the cargo tank for repair or overhaul 
is a relatively simple task. The example ships have also been 
provided with portable pumps capable of being lowered into 
the tank through suitable openings in the cargo tank deck such 
as the cargo tank access hatch or a butterworth type opening. 

Prior to leaving the discharge port, ships which have 
carried Category A cargoes, or Category B or C cargoes which 
have been identified as being either solidifying substances or 
high viscosity liquids as defined in the Annex, must carry out 
a mandatory wash of the cargo tanks known as a ‘prewash’. 
During the prewash the cargo tanks are washed by means of 
fixed rotary tank washing machines. For tanks which have 
contained Category A substances, or Category B or C solidi- 
fying substances, all tank surfaces must be washed and several 
washing machines may be required for this purpose. During 
the prewash the liquid in the cargo tank is kept toa minimum 
by continuously pumping the tank contents to shore reception 
facilities. Solidifying substances and those with a viscosity 
equal to or greater than 25 mPa at 20°C should be washed with 
hot water at a temperature of at least 60°C. The quantity of 
wash water required for a prewash is a function of the 
residue quantity, the tank size, the cargo properties and the 
area of operation. 

If the cargo tanks have contained Category B cargoes other 
than those specified above, a prewash is not required. If it is 
the Master’s intention to add water to the cargo tank for oper- 
ational reasons and subsequently to discharge to the sea 
within one of the Special Areas defined in Annex II (the Baltic, 
the Black Sea and, since 1st July 1994, the Antarctic Area), a 
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prewash is required. In this situation, the residue from the 
prewash must be discharged to shore reception facilities prior 
to the ship’s departure from the unloading port. As an alter- 
native to the prewash, the water/residue mixture may be 
retained on board for subsequent discharge to the sea through 
the underwater discharge outlet in accordance with the 
approved Procedures and Arrangements Manual once the 
ship has left the Special Area. 

Ships which have carried Category C non-solidifying, low 
viscosity substances are not required to carry out a prewash. 

The underwater discharge outlet is required to be located 
within the cargo area, on the turn of bilge, and is normally 
positioned just forward of the engine room. The outlet must 
be designed in accordance with specific criteria given in 
Annex II, in order to ensure that the residue / water mixture is 
discharged at a sufficiently slow rate that it remains within 
the boundary layer of the hull and is drawn through the 
propeller race into the ship’s wake. The outlet must be sited 
well clear of all sea water intakes. 

Ships which have carried Category D cargoes are also not 
required to prewash the tanks, it being considered to be suffi- 
cient to dilute the cargo residue with 10 parts of water to one 
part of cargo, prior to controlled discharge to the sea in accor- 
dance with defined procedures. 

A simplified summary of the arrangements described 
above is given in Table 3. 

Tank washing procedures for new ships are affected by 
revision of the prewash procedures associated with Appendix 
B of Annex II, which have been amended to specify prewash 
requirements as a minimum wash water quantity. These stan- 
dards are mandatory for ships built on or after 1st July 1994. 

To reduce the quantity of wash water required for 
prewashing purposes, the amendments to Annex II also 
permit the wash water to be recycled through a number of 
cargo tanks. The quantity of wash water required for 
prewashes employing recycling techniques is determined in 
the same manneras for a normal prewash. However, the maxi- 
mum quantity of cargo residue in the tank washings is not 
allowed to exceed 5%, and sufficient wash water must be used 
to ensure that the tank can be continuously washed. The wash- 
ing should be continued until the accumulated quantity of 
water added to the tank satisfies minimum criteria based upon 
normal prewashing parameters as outlined above. As for a 
normal prewash, solidifying and high viscosity substances 
must be washed with hot water at a temperature of at 
least 60°C. 

Recycling techniques can only be used for cargo tanks 
fitted with sufficient fixed tank washing machines such that 
all tank surfaces are washed. Cargo compatibility and reac- 
tivity must be taken into account; therefore the Master must 
satisfy himself that the tanks have contained the same or 
similar substances. 

Annex II allows prewashes to be carried out using a 
solvent in lieu of or mixed with water, or using detergent 
cleaning additives. Solvents are particularly useful when 
highly viscous, solidifying or water reactive cargoes have been 
carried. However, a recent Annex II amendment imposes safe- 
guards to limit discharge of solvents to the sea, and prohibits 
cleaning agents or additives containing pollution Category A 
products. 

When using solvent washing or recycling techniques, the 
ship operator must abide by the safety requirements of oper- 
ational guidance documents such as the International 
Chamber of Shipping’s Tanker Safety Guide (Ref. 8). 

As an alternative to the above, Annex II permits cargo 
residues with a high vapour pressure to be removed by vent- 
ing. Portable or fixed ventilation fans may be used to blow 
large quantities of air into the cargo tank and through the 
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Within Special Areas 


Outside Special Areas 


CARGO POLLUTION CATEGORY 


Action 
following 
Discharge 
of Cargo 
Note (i) 


Bor C Solidifiers | D A 
Note (iii) 
(3) 


B 
(Alternatives) 
(6) (7) 


B Solidifiers 
Note (iii) 
(8) 


C Solidifiers Note (iii) 
(Alternatives) 
(10) (11) Note (iv) 


Prewash 
Required 


Yes 


Discharge To shore To shore To shore To shore To shore To shore 


of Prewash reception reception reception reception | reception reception 

facility facility facility facility facility facility 
Discharge of | To sea via As per As per Diluted As per To sea As per As per As per As per 
any water underwater | column (1) | column (1) cargo, column (1) | outside column (1) column (1) | column (1) | column (6) column (4) 
subsequently | discharge concentration special area 
added to tank | outlet as per up to 10% via underwater 
Note (ii) approved maximum may discharge 

P+A Manual be discharged outlet, as per 

to sea, as per approved 


approved P+A Manual 


P+A Manual 


NOTES: 


(i) As an alternative to the cleaning procedures outlined in the table, Cargo residues with a vapour pressure greater than 5 x 10° Pa at 20°C may be removed by ventilation procedures as described 
in Marpol Annex II. 


(ii) Cargo residue/water mixtures may be discharged to shore reception facilities. 


(iii) Including high viscosity substances, as defined in Marpol Annex II. 


(iv) Residues of Category C substances with viscosities less than 60m Pa.s at the unloading temperature may be retained on board for discharge to sea outside the special area. 


Table 3: 
General tank cleaning procedures for a ship which complies with the efficient stripping, tank washing and discharge design requirements of Marpol Annex II 


piping system until these are considered to be dry. This proce- 
dure would not be accepted for toxic or flammable cargoes, 
and may not be accepted at all by numerous Port Authorities. 

The Code includes a number of cargoes which require 
temperature control to keep them ina state in which they can 
be pumped, or in a non-hazardous condition. The carriage 
temperature of coal tar, for example, is normally in the region 
of 70°C. Below this temperature the cargo becomes progres- 
sively more viscous until it finally solidifies. It is not 
uncommon for the cargo temperature to be allowed to drop 
slightly during transit, being subsequently boosted to the 
required temperature just prior to discharge. 

Isoprene is an example of a cargo which requires to be 
cooled for safety purposes. If the temperature is allowed to 
rise, the cargo will produce excessive quantities of flammable 
gas which may exceed the design parameters of the cargo 
piping and venting systems, and threaten the integrity of the 
cargo containment system itself unless these have been specif- 
ically designed for this purpose. Another problem associated 
with this cargo is that it must be inhibited prior to loading. If 
the cargo boils off, the inhibitor will tend to remain in the tank, 
hence the boil-off will be uninhibited cargo vapour. The 
vapour will be prone to polymerisation which may occur 
within the ventilation system, causing a blockage with poten- 
tially catastrophic results. 

Temperature control systems must be constructed of mate- 
rials which are compatible with the cargoes to be carried. The 
heating or cooling media must also be suitable for the cargoes. 
All four ships described in this paper have stainless steel heat- 
ing coils installed in each cargo tank, but they differ in the heat 
transfer media used. Ships A and B use thermal oil, Ship C 
has a steam system, whilst Ship D uses a combination of hot 
water in some tanks and thermal oil in others. In order to 
reduce the possibility of the media becoming contaminated, 
the systems are required to operate at a greater internal pres- 
sure than the maximum which can be externally imposed by 
the cargo. When heating or cooling a toxic cargo, additional 
safeguards are required by the Rules and the Code. In situa- 
tions where the system is required to enter the engine room, 
means must be provided for verifying that contamination has 
not occurred. On Ship C this is achieved by passing the steam 
condensate through an observation tank located in the cargo 
area. If possible cargo contamination is observed, the conden- 
sate is not permitted to re-enter the engine room. As a general 
requirement, each tank is required to have a valve in the 
system such that the coils serving that tank can be isolated. 

Means must be provided for measuring the cargo temper- 
ature, whilst ensuring protection of the crew. A cargo 
temperature alarm should be provided in a continuously 
manned location such as the bridge of the ship, in cases where 
overheating or overcooling could result in a dangerous condi- 
tion. For example, Ship D is permitted to carry vinyltoluene, 
which is heat sensitive and also requires to be inhibited for 
carriage. It is essential that this cargo is not overheated; there- 
fore the Code and the Rules require that, prior to cargo 
loading, the heating coils to the relevant tanks be blanked. As 
the cargo tanks are required to have a closed gauging system, 
and hence a closed system of temperature monitoring, the 
tanks containing the cargo are provided with remote reading 
thermometers, which continuously measure the cargo 
temperature without exposing the crew to cargo vapours, and 
which give an alarm on the bridge if the maximum allowable 
temperature is exceeded. 


4.6 Environmental Control Systems 


A number of chemical substances react with oxygen or other 
gases. This reaction may affect the quality of the cargo or 
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generate a hazardous situation. The atmosphere within cargo 
tanks containing such substances is, therefore, required to be 
environmentally controlled. The Code indicates for each cargo 
whether tank environmental control is required to avoid a 
hazard and how this control must be achieved. Four types of 
environmental control are listed, namely Inerting, Drying, 
Padding and Ventilation. 

Inerting is the most common arrangement and requires 
that, prior to loading a cargo, the cargo tank is filled with a 
gas suchas nitrogen whichis then displaced through the cargo 
tank vent system as the cargo is loaded. It is common practice 
for the nitrogen to be supplied by the shore facilities. The ship 
must, however, be able to replace nitrogen lost during the 
voyage. Modern chemical tankers which regularly carry 
cargoes requiring this type of protection, are frequently 
provided with a dedicated nitrogen generating plant and in 
virtually all cases have a permanently installed nitrogen 
distribution system. Ships which only occasionally carry 
cargoes requiring to be inerted may rely on nitrogen cylinders 
which are supplied when the cargo is loaded. The cylinders 
are then connected to the appropriate cargo tanks and piping 
systems on board using demountable arrangements. The 
volume of inert gas supplied depends on factors such as the 
volume of the vapour spaces, the length of voyage and the 
anticipated weather conditions. 

Unlike conventional tankers, flue gas cannot be used to 
inert the cargo tanks on chemical tankers due to the problems 
caused by the potential incompatibility of the cargo with the 
sulphur and other impurities contained in the flue gas. Also, 
flue gas is permitted to contain a greater proportion of oxygen 
than is satisfactory for the prevention of a hazardous reaction 
in the case of a number of chemical cargoes. 

The conventional means of complying with requirements 
for Drying are basically the same as those for Inerting, but the 
nitrogen must be moisture-free. This requirement is readily 
satisfied by ships which rely on nitrogen cylinders supplied 
from shore, by specifying the necessary quality. For ships, such 
as Example D, which have a nitrogen generating plant and 
associated distribution system installed onboard, itis essential 
that the system be designed and maintained to produce suffi- 
cient nitrogen of satisfactory quality and dryness. 

Cargoes which require padding are provided with a blan- 
keting medium to separate the cargo from air, for example 
phosphorus, as mentioned earlier. 

Environmental control by ventilation only applies to a 
very limited number of cargoes and is not relevant for the 
generality of chemical tankers. 


4.7 Cargo Vapour and Liquid Control Systems 


The cargo tanks are required to be provided with venting 
systems which are independent of air pipes and vents serving 
other parts of the ship. The system must be designed such that, 
allowing for items such as flame screens, cargo density, pres- 
sure loss and pressure/vacuum valves, it is able to transfer 
vapour at not less than 1.25 times the cargo loading or unload- 
ing rate, thereby preventing both over and under 
pressurisation of the tank. The Master must be advised of the 
maximum loading and unloading rates for each tank or group 
of tanks, and when LR is authorised to issue the International 
Certificate of Fitness required by the Code, this information 
is given in the form of a cautionary note. The venting system 
should be constructed of a material which is compatible with 
the cargoes to be carried and all of the ships described in this 
paper use AISI 316L stainless steel. The system must be 
connected to the top of each tank and, where possible, 
designed to drain back to the tank. Where this is not possible, 
suitably located drain cocks are required. Arrangements must 


be made to ensure that the liquid head in the cargo tank does 
not rise within the venting system thereby exceeding the test 
head of the tank, or spilling onto the deck. This is normally 
achieved by the fitting of high level alarms or overflow control 
systems, and adhering to safe gauging and tank filling proce- 
dures in service. 

The outlets from the ventilation system should be 
designed such that cargo vapours are discharged vertically in 
an unimpeded jet, thereby reducing the possibility of vapours 
accumulating on the cargo tank deck. The outlets should also 
be located such that vapours cannot enter the accommodation, 
engine room or other similar spaces or zones where sources 
of ignition may be present. The vent outlets must also be 
designed and positioned such that water cannot readily enter 
the tank. 

Two types of venting system are specified by the Code, 
namely ‘open’ and ‘controlled’. 

Open Venting is specified for cargoes which pose little or 
no flammable or toxic hazard. The vent outlets may be from 
individual tanks or combined together from a number of 
tanks. No restriction to the flow of cargo vapours such as shut- 
off valves or blanks is permitted. None of the ships considered 
in this paper use an open venting system, as this would seri- 
ously restrict the range of cargoes which can be carried. 

Controlled Venting systems are required to be fitted to all 
tanks carrying cargoes which emit harmful or flammable 
vapours, as indicated in the summary of minimum require- 
ments incorporated in the Code. This applies to 
approximately two-thirds of the cargoes included in the Code. 
Each tank must be fitted with a pressure/vacuum valve to 
relieve over-pressure or under-pressure. The pressure relief 
side may be combined into a single vent head (subject to 
compatibility of the cargo vapours), but this would be unusual 
fora modern chemical tanker other than a dedicated ship. Due 
allowance must be made in the design phase for pressure 
losses within the system and, as for open venting, restrictions 
such as shut off valves and blanks are not permitted. Ships 
intended to carry cargoes with a flash point of 60°C or below 
(closed-cup test) are required to be fitted with arrangements 
to prevent the passage of flame, designed, tested and located 
in accordance with acceptable international standards. The 
design of the devices should ensure that they will not be 
blocked by, for example, polymer build up, cargo icing or dust. 
The vent outlets should be not less than 4 metres above the 
deck or 4 metres above any fore and aft gangways, and should 
not be within 10 metres of any openings into such spaces as 
the engine room or accommodation. If the tank is fitted with 
a high velocity vent valve which discharges vapour at not less 
than 30 m/s, the vertical distance may be reduced to 3 metres 
(Fig. 4(a)). 

Each of the cargo tanks on Ships A to D is fitted with an 
independent controlled venting system utilising stainless 
steel high velocity vent valves of the type shown in Fig. 5 
(Ref. 9). These valves allow the vapour pressure to accumulate 
inthe tankand venting system until the set pressure is reached, 
when the valve opens and relieves the pressure to atmosphere 
in the form of the required unimpeded jet. 

For ships intended to carry cargoes identified as having a 
severe toxic hazard, the Code specifies more onerous require- 
ments for the distances of the tank ventilation outlets from 
spaces and areas such as the accommodation and engine 
room, also the upper deck or fore and aft gangway unless high 
velocity vent heads capable of producing an unimpeded jet 
of at least 30 m/s are fitted (Fig. 4(a)). 

For severely toxic products, the Code specifies that the 
relief valve setting must be at least 0.2 bar gauge, and this 
figure has been adopted for each of the ships described in this 
paper. Wherea highersetting is selected, this can have an effect 
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on the design of the ship’s structure and increased scantlings 
may be required for compliance with the Rules (Ref. 5(a)). 

Some cargoes pose such a severe toxic hazard that the 
Code requires a connection to be provided for returning the 
vapours displaced from the cargo tanks to the shore loading 
facility, for example in the case of propionitrile. In this respect, 
the principle of vapour recovery from chemical tankers is not 
new. However, ships which are trading to or within the United 
States must also comply with the USCG Regulations for 
Vapour Control Systems (Ref. 10) as applicable to chemical 
tankers. 

For example, Ship D is equipped with a stainless steel 
vapour collection system which is permanently connected, via 
isolation valves, to each cargo tank. The system has been 
designed not to interfere with the pressure / vacuum protec- 
tion given to the cargo tanks by the tank vent system. The 
capacity of the vapour collection system is such that at no time 
during loading should the pressure or vacuum increase in the 
cargo tank or collection line to the extent that the 
pressure / vacuum relief valve operates. To enable pressure to 
be monitored, a pressure indicator has been installed in the 
vapour collecting line, which gives a high or low pressure 
audible and visible alarm on the bridge of the ship, from where 
cargo transfer is controlled. 

The vapour collection line has a port and starboard shore 
vapour return connection located together with the cargo 
manifolds. As required by the regulations, each vapour 
connection is painted red / yellow /red fora distance of 1 metre 
from the manifold, and is provided with an isolating valve 
and a standard flange for connection to the shore-based 
vapour processing facilities. It is essential that incompatible 
vapours are not collected at the same time, and the collection 
line is required to be purged between the discharge of such 
vapours. 
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Figure 5: High velocity vent head (Ref. 9) 
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Figure 6: Typical vapour control system arrangement 


Standards for vapour emission control systems have also 
been developed and adopted by IMO for tankers and shore 
terminals. As in the case of the U.S. regulations, these 
incorporate safeguards against overpressurisation or under- 
pressurisation, including means of emergency pressure or 
vacuum breaking and isolating the ship from the shore 
system. The standards require closed gauging, overfill protec- 
tion, controlled venting, high and low pressure alarms and, 
importantly, recognise the necessity for adequate training and 
operational procedures. The IMO standards do not have 
mandatory status, but form recommended criteria which 
should be adopted when such systems are utilised, for exam- 
ple when mandated by individual Administrations. 

Fig. 6 shows a schematic arrangement of the Vapour 
Control System for a typical cargo tank. 

Every modern chemical tanker must have an accurate and 
reliable tank gauging system which satisfies the requirements 
of the Code and the Rules. The system must be capable of 
measuring the tank contents at any level of filling and must 
be independent of the high level and overflow control system 
alarms. The Code specifies three different types of gauging 
system dependent upon the flammability and toxicity of the 
cargo, viz: 


Open gauging is permitted for cargoes with little or no 
flammable or health hazard. The cargo level is determined by 
sounding the tank through an opening in the deck such as an 
ullage hatch. There are no restrictions on the area of the open- 
ing. This system has no practical application on the generality 
of modern chemical tankers. 


Restricted gauging is acceptable for cargoes which pose a 
significant flammable or health hazard. Only a small area of 
the cargo is permitted to be exposed, and it is normal for the 
tank ullage to be determined through a sounding pipe, fitted 
with a screw cap or similar closing appliance. This system is 
also unlikely to be installed on ships which are intended for 
flexible operation. 


Closed gauging is required for cargoes with a severe 
flammable or health hazard, and for cargoes requiring envi- 
ronmental control. In this system the gauging device does not 
permit cargo liquid or vapour to be released; common exam- 
ples of such systems used on modern chemical tankers are 
indirect radar and float-operated types. In order to maximise 
the number of cargoes on their cargo lists, and hence their flex- 
ibility of operation, all of the ships considered in this paper 
have closed gauging systems. 
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When cargoes possess a significant flammable, corrosive 
or toxic hazard, or are considered to pose a significant threat 
to the marine environment, the Code requires that they be 
carried in tanks provided with visible and audible high level 
alarms which will activate when the liquid level in the tanks 
approaches the normal full condition. The alarm is required 
to alert the crew when the tank is nearly full, in order that the 
loading rate can be reduced and stopped before the cargo tank 
is full. The high level alarm is required to be independent of 
the gauging devices mentioned earlier in this section. 

Cargoes posing a more severe hazard are required to be 
carried in tanks having a second level alarm, known as a tank 
overflow control system or high/high level alarm. For these 
cargoes, the high level and overflow control system alarms 
must be independent of one another and positioned such that 
they are activated at 95% and 98% full respectively. If the over- 
flow control system alarm is activated, the ship’s crew and 
shore terminal personnel are required to take immediate steps 
to shutdown cargo loading. This shutdown is not permitted 
to be via automatic closing valves, as this could lead to 
hydraulic shock within the piping system, potentially causing 
system damage which could result in uncontrolled release of 
the cargo into the environment. 

All level alarms must be tested prior to loading and must 
give a signal to the operators in the event of power failure. 

Ship D has a sophisticated integrated monitoring and 
control system of the type shown in Fig. 7. The level of the 
cargo within the tank is determined using a radar tank gaug- 
ing system which satisfies the requirements for closed 
gauging. A radar transmitter is installed in each cargo tank at 
the upper deck level. The length of time taken for the radar 
wave to return to the radar transmitter from the surface of the 
cargo is fed into a computer located within the superstructure 
which determines the contents of the tank. This information 
is displayed on an interactive VDU located on the ship’s 
bridge. The radar system has the advantage that there are no 
working parts located within the cargo tank, hence the prob- 
ability of failure within the tank is low and the need for the 
crew to be exposed to the cargo vapours for maintenance 
purposes is minimal. If required, following discharge the 
antenna and reflector can be cleaned via a small cleaning hatch 
which has been installed in the housing. It is reported, 
however, that systems of this type continue to work satisfac- 
torily without routine cleaning, even after viscous cargoes 
such as coal tar have been carried. 

In addition to the radar gauging system, the computer 
takes input from two independent float type high level alarms 
located within each cargo tank. One float is set to alarm at 95% 
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Figure 7: Integrated monitoring and control system 


full, ie. the high level alarm, whilst the other is set for 98% 
full, i.e., the overflow control alarm required by the Code. This 
is also the overfill alarm required by the USCG Regulations 
for Vapour Control Systems (Ref. 10). Both alarms are 
connected to the bridge VDU, which gives an audible and visi- 
ble signal when either alarm is activated. The overfill alarm 
is also given on the cargo tank deck where it must be both 
audible and visible from any position on the deck. 

The system is also able to monitor the cargo temperature 
and vapour pressure, and gives an alarm should the prede- 
fined limits be exceeded. The cargo pumps and associated 
valves are controlled using the interactive VDU. The system 
is able to monitor the ship’s draught and ballast tank levels, 
and uses this information, together with the cargo tank filling 
levels, to determine loading conditions which satisfy the 
longitudinal strength and stability criteria. 


4.8 Fire Safety 


One of the major risks faced by all ships is that of fire, and 
ships such as chemical tankers carrying highly flammable 
liquid cargoes represent a special risk. Once at sea, ships must 
be self-reliant with respect to fire-fighting as there is little 
chance of any outside intervention. Prevention must remain 
the first order of control, in association with comprehensive 
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extinguishing arrangements which can be introduced should 
a fire occur, as required by the Code and the Rules (Refs. 5(a) 
and 5(e)). 

Chemical tankers are required to be provided with the 
following basic fire-fighting equipment, systems and fittings: 
(i) Portable fire extinguishers throughout the engine room 
and superstructure. 

A fixed fire-fighting system located in the engine room. 
A fixed firemain system installed throughout the machin- 
ery spaces, superstructure and cargo area. 

A combination of structural fire protection and a fire 
detection system installed throughout the superstruc- 
ture. The superstructure is required to be constructed of 
non-combustible materials, the fire rating of the bulk- 
heads and decks being based on the fire hazard of the 
spaces on either side. Corridors, stairways and escape 
routes are required to be fitted with a fire detection 
system. 

A fixed deck foam fire-fighting system to deal with fires 
emanating from the cargo or cargo spaces. Such a system 
consists of a foam concentrate storage tank, which must 
be located in a safe area such as the superstructure, a 
number of water pumps which are normally located in 
the engine room, together with a piping system designed 
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to distribute the foam compound / water mixture to the 
entire cargo area. Fig. 8 shows a representative schematic 
arrangement of the deck foam system. 


Two foam monitors are required to be positioned in way 
of the bridge front, at the aft end of the cargo area, with further 
monitors positioned at regular intervals along the tank deck. 
The maximum permissible distance between monitors is 
seventy-five percent of the monitor ‘throw’ in still air. For the 
ship examples described in this paper, sufficient foam solution 
is available to enable the systems to operate for thirty minutes 
whilst providing the greater of the following: 

(i) 10.0 litres per minute per square metre for the breadth of 

the ship multiplied by the maximum distance between 

monitors, with a minimum of 1,250 litres per minute. 

(ii) 20.0 litres per minute per square metre for the horizontal 
sectional area of the largest cargo tank. 

(iii) 2.0 litres per minute per square metre for the entire cargo 
tank deck area. 


The above corresponds to Code and Rule requirements. 

The required quantity of foam compound is dependent 
on the largest of the above quantities, coupled with the manu- 
facturer’s required ratio of foam concentrate to water mixture. 
For Ship D the quantity of foam concentrate is governed by 
(iii) above, which, with the applicable 6% mixture ratio, gives 
a total quantity of concentrate of 15 m3. A total of six foam 
monitors have been fitted, each with a capacity of 4090 litres 
per minute and a maximum throw in still air of 72 metres. 

The foam system is also required to be provided with hose 
connections such that portable foam applicators can be used 
on the tank deck to reach small or otherwise inaccessible fires. 
At least four foam applicators are required. 

The wide variety of chemical substances available for 
regular shipment presents the chemical tanker operator with 
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a number of potential fire-fighting problems. Some cargoes 
can be extinguished with a regular foam compound. Other 
cargoes cause regular foam compound to decompose, thereby 
making it ineffective. For these cargoes, suitable alcohol 
resistant foam compounds have been developed. 

Exceptionally flammable cargoes such as carbon disul- 
phide cannot be readily extinguished using foam compounds 
and ships transporting such substances are required to be 
provided with a water spray or drencher system, which will 
not only extinguish a fire but also cool the surrounding area 
more effectively than foam, thereby preventing re-ignition. 
Cargoes which are water-reactive cannot use any of the above 
systems. When transporting these cargoes, ships are required 
to have a dry powder fire-fighting system. Ships which are 
dedicated to the transportation of non-flammable cargoes, 
such as sodium hydroxide, are not required to be provided 
with a cargo tank deck fire-fighting system, but few ships are 
dedicated to a service of this type. 

The Code and the Rules (Ref. 5(a)) acknowledge that ships 
are likely to require a range of fire-fighting systems, the partic- 
ulars of which depend upon the cargoes to be carried. 
An alcohol-resistant or multi-purpose foam is suitable for the 
majority of chemical cargoes. An installation of this type is 
virtually indispensable and is, therefore, a practical require- 
ment for all chemical tankers intended to carry a wide variety 
of chemicals. 

Where particular fire-fighting problems are identified for 
individual cargoes, the International Certificate of Fitness and 
the cargo list issued for classification purposes will contain 
appropriate operational notes; for example, dry chemical! 
systems cannot be used in conjunction with maleic anhydride 
due to the possibility of an explosive reaction. 

In the event of a major fire, the crew are required to assem- 
ble in the accommodation pending evacuation from the ship. 
The accommodation is, therefore, required to act as a fire 
citadel, and must provide protection from the source of the 


fire. For many ships, the most likely source of fire is the engine 
room, and the boundary between the engine room and accom- 
modation is required to be insulated such that heat and smoke 
will not pass for at least one hour, i.e. protected to A-60 stan- 
dard. Chemical tankers carrying flammable liquid cargoes are 
additionally required to insulate the forward boundary and 
sides of the superstructure to a distance of 3 metres aft of 
the forward boundary to A-60 standard, thereby providing 
protection from the heat radiated from a cargo area fire 
(Fig. 4(b)). Personnel protection in an emergency is addressed 
in Section 6.5 of the paper. 


4.9 Hull Structure and Materials 


There would be little point in equipping a chemical tanker 
with state of the art containment equipment in order to protect 
the environment if the most essential containment features — 
the hull envelope and tank boundaries — were not structurally 
reliable. This aspect, which is not addressed in any detail in 
the Code, is commonly accepted as being the province of the 
designer and the Classification Society, but little recognition 
is given to the degree of expertise which is essential in these 
areas if the relatively low structural failure rate of chemical 
tankers is to be maintained. 

In addition to corrosivity, there are two particular charac- 
teristics of chemical cargoes which directly affect the cargo 
tank structural arrangements and scantlings. The first is rela- 
tive density, and the second is temperature of carriage. High 
vapour pressure can also have a direct effect in the case of a 
small number of cargoes, but this does not usually dictate 
overall structural design unless independent tanks are 
required. A further important design consideration is the 
intended range of loading conditions. 

Chemical tanker structures can seldom be dealt with 
solely on the basis of the scantlings formulae contained in the 
Rules (Ref. 5(a) and 5(b)). Direct calculations are almost invari- 
ably necessary, and the particulars must take account of the 
actual structural configuration which is contemplated. The 
loading conditions included in Ref. 11 are, for practical 
purposes, the minimum which should be considered in direct 
calculation procedures. 

A large proportion of the cargoes covered by the Rules 
(Ref. 5(a)) have a relative density greater than 1.025, which is 
the benchmark figure for bulk liquid cargo tanks, dating from 
the time when any tank on an oil tanker could, in theory, be 
used for ballast water with the adjacent tanks empty. The 
greatest chemical cargo relative density which is normally 
contemplated is that of ethylene dibromide (2.17). Perhaps the 
most common range for design purposes is up to about 1.90, 
which, from the strength aspect, permits cargo tanks to be 
loaded witha range of commonly transported acids, for exam- 
ple 98% concentration sulphuric acid (1.84), nitric acid 70% 
aqueous solution (1.50) or phosphoric acid 80% solution (1.70). 

The standard formulae for derivation of cargo tank scant- 
lings in the Rules (Ref. 5(a)) take direct account of the 
maximum cargo relative density which is intended. The cargo 
tank test head must also be adjusted where cargo densities in 
excess of the standard 1.025 are contemplated, although it is 
impracticable to apply a hydrostatic head which simulates the 
maximum possible loading on the structure in the bottom area 
of the tank, as this would inevitably overload the structure in 
the upper region (Ref. 12). 

The fact that a cargo tank has been strengthened for full 
cargoes of high relative density does not mean that all possi- 
ble levels of filling are acceptable. Partial filling of cargo 
tanks in service can result in increased dynamic loading of 
the tank boundaries due to sloshing of the liquid. The magni- 
tude of the sloshing loads not only depends upon the design 
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characteristics of the ship, but also the dimensions and geom- 
etry of the cargo tank. In the majority of chemical tankers, 
these are free of internal structure which might have damp- 
ened sloshing loads in service. Where partial filling of cargo 
tanks is contemplated, additional calculations frequently 
have to be undertaken, and equally frequently show that it 
is necessary either to strengthen the structure or to avoid 
critical filling levels (Ref. 13). 

Itis relatively common for the carriage of cargoes of higher 
relative density than that for which the scantlings are designed 
to be contemplated in service. In such cases, partial filling to 
a depth in the ratio of the relative density for which the tank 
has been approved to the relative density of the intended cargo 
may be possible, but additional calculations might be neces- 
sary, and it is probable that certain levels of partial filling will 
be prohibited. 

All of these factors, and others, are illustrated by the four 
example designs: 


Ship ‘A’ 


Ship A, the smallest example, might appear to be the least 
complex in terms of structural design and construction, but 
such a conclusion would be superficial. The majority of the 
cargo tanks are designed fora maximum cargo relative density 
of 1.85 and four are suitable for a density of 1.96. The tanks 
are constructed of solid stainless steel of duplex microstruc- 
ture and, unusually, the corrugations of the transverse and 
longitudinal centreline bulkheads are staggered in alternate 
tanks throughout the cargo tank length, as shown in Fig. 2(a). 
This permits a balanced distribution of loading to be main- 
tained in a non-uniform loading condition. Mild steel 
longitudinal framing is arranged at deck, bottom and side 
throughout the cargo tank region. The inner skin is hoyizon- 
tally stiffened and the deck longitudinals are fitted externally, 
which is a conventional arrangement for a chemical tanker. 

Austenitic stainless steel containing about 18% Cr, 12% Ni, 
2.5% Mo and not more than 0.03% carbon (e.g., AISI 316L) is 
frequently used for chemical tankers. The austenitic grades 
havea well established range of compatibility with chemicals, 
possess good ductility, workability and relatively good weld- 
ability characteristics. More highly alloyed steel such as 317L 
has become progressively more popular where circumstances 
conducive to particular forms of corrosion, e.g. pitting, are 
anticipated and, by adding about 0.2% N, (316LN, 317LN), a 
significant increase in strength is achieved in association with 
a further improvement in corrosion resistance. The chemical 
compositions of these and other grades are given in the Rules 
(Ref. 5(f)), and the major stainless steel producers have 
published cargo resistance lists which cover many hundreds 
of chemicals. 

The solid stainless steel incorporated in Ship A conforms 
toa significantly improved grade which is not of the generally 
austenitic type, but is of ‘duplex’ austenitic-ferritic structure. 
Duplex stainless steel requires care in construction and in 
service, but combines good resistance to pitting and crevice 
corrosion with satisfactory weldability and a strength which 
is well in excess of that of nitrogen-alloyed austenitic steels. 
A proof strength of about 480 N/mm2 can be achieved, which 
is greater than the yield strength provided for in the Rules 
(Ref. 5(g)) in respect of higher tensile steel. Therefore, when 
duplex steel is used, consideration must be given on a case by 
case basis to the Rule factor ‘k’ which is utilised to adjust 
formulae-derived scantlings. 

In general, the enhanced corrosion-resistance and, for 
certain grades, the increased strength of stainless steel 
permits a significant reduction in cargo tank boundary thick- 
ness in comparison to that required for mild steel. However, 


experience has shown that, for all structure in the cargo tank 
region, an overall minimum thickness relative to ship size 
must be maintained, and this can limit the thickness reduction 
attainable for smaller ships. Also, the proof strength of the 
stainless steel may be substantially diminished at elevated 
temperatures and due account must be taken of the service 
temperature in deriving scantlings (Ref. 5(a)). This relates not 
only to local strength but also to primary structure. 

Any serious corrosion of cargo tank boundaries is a poten- 
tial threat to the environment. The principal types of corrosion 
to which stainless steel is susceptible, and a number of avoid- 
ance measures, are outlined in Table 4. 


General corrosion Maintain passivity 


Galvanic corrosion — Avoid exposure of dissimilar metals 


Crevice corrosion — Smooth tank interiors and weld profiles 


Pitting Alloy with molybdenum 
Circulate cargoes which may contain 
sludge 


Avoid seawater 


Intergranular corrosion Low carbon, or stabilise steel 


(weld decay) 


Stress corrosion cracking Alloy with molybdenum 
Avoid caustic cargoes, chlorides 


and sulphides at high temperatures 


Minimise stress concentrations 


Table 4: Corrosion avoidance 


Clad steel remains a possible option for tank boundary 
plating which also forms the boundaries of ballast tanks. A 
water ballast tank provides ideal conditions for corrosion of 
stainless steel, which must be protected by a suitable coating. 
In practice, the mild steel must also be coated, and there is a 
risk of galvanic corrosion occurring if the coating system dete- 
riorates in service, when areas of stainless steel and mild steel 
will be exposed to the electrolyte. The use of clad steel is capa- 
ble of resolving this particular problem, particularly if there 
is any doubt about the quality of coating maintenance in 
service. 

An awareness of the principles of the corrosion resistance 
of stainless steel is necessary from commencement of 
construction and plentiful advice is available from manufac- 
turers as to shipyard procedures. For example, pure fresh 
water, ifavailable, isa recommended medium for tank testing. 
The Rules (Ref. 5(h)), however, do not preclude the use of sea 
water for initial hydrostatic testing (which is necessary for 
every cargo tank ona chemical tanker), but immediate rinsing 
with clean fresh water is advisable. 

A frequent problem relating to ease of access for inspection 
purposes on smaller ships, such as example A, is that of 
achieving the required minimum size of access openings 
whilst maintaining structural strength. The most serious prob- 
lems arise with the upper deck accesses to the narrow wing 
spaces, the openings in the transverse webs within these 
spaces and the openings in double bottom floors and girders. 
In the case of the upper deck accesses, the problem of longi- 
tudinal stress concentration can be relieved to some extent by 
adopting an elliptical outline for the fore-and-aft edges of the 
opening, with well-radiused corners. The openings in floors 
and similar members should be located where shear stress is 
minimal, and edge reinforcement should be arranged as 
necessary to ensure satisfactory resistance to buckling. 
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A satisfactory degree of reliability of containment systems 
in service is essential if protection of the environment is to be 
maintained. This can only be achieved if inspection proce- 
dures are properly controlled during construction. The Rules 
(Ref. 5(k)) require that initial non-destructive examination of 
chemical tank boundaries be effected by radiography and 
crack detection methods at defined locations, depending 
upon the structural arrangements. The principal areas are 
those of maximum weld constraint, such as the intersections 
of welded butts and seams in cargo tank bulkheads, and tank 
boundary welds, particularly if penetrated by continuous 
secondary members such as horizontal stiffeners on longitu- 
dinal bulkheads. 

The carriage of bulk liquid cargoes at greater than ambient 
temperatures has been commonplace for very many years on 
oil tankers. The background of experience which this provides 
enables the structural effects of carrying chemicals at elevated 
temperatures to be evaluated in relation to conventional refer- 
ence temperatures which are given in the Rules (Ref. 5(a)). 
Various different heating arrangements and media are 
adopted for chemical tankers as a consequence of the cargo 
characteristics. Whatever the means and medium of heating, 
temperature differentials are induced in the tank boundaries 
when heated cargoes are carried and, unless the tanks are 
structurally independent, in the hull structure. The tempera- 
ture differentials create thermal stresses in components which 
are constrained against expansion and, if the effects might be 
more severe than the experience-related norm, an assessment 
of thermal stress is necessary (Ref. 14). 

Ship A provides an opportunity to consider in greater 
depth the effect of high temperature cargoes on the hull struc- 
ture, on the basis of calculations carried out for a similar 
configuration. 

Firstly the temperature distribution within the structure 
must be evaluated and LR programs are available for this 
purpose. The proposed cargo temperature for this example is 
taken to be 85°C. The reference temperature is 65°C (Ref. 5(a)). 
As the centreline bulkhead of Ship A is vertically corrugated 
and free to expand or contract longitudinally without signif- 
icantly affecting the deck or double bottom structure, it is 
reasonable to exclude it from the two-dimensional structural 
model, which consists of the longitudinal double-skin at 
bottom and side, and the single-membrane deck structure. It 
is not a requirement of the Rules that all continuous longitu- 
dinal members should be located externally to the cargo tank 
boundaries as arranged, for practical purposes, on Ship A. 
Therefore, as the structure could be internal and immersed in 
the cargo, a steel temperature which is equivalent to the refer- 
ence cargo temperature (65°C) is considered to be acceptable. 

In order to simplify the procedure, the thermal and phys- 
ical properties of heavy fuel oil (HFO) and kerosene are used 
in the calculation. Although the latter would be carried 
normally at ambient temperature, its thermal properties 
provide a practical upper limit to the calculated range of steel 
temperatures. For this example, the tanks are assumed to be 
100% full, in order to take account of contact between cargo 
and deck structure, and the overall loading condition is 
assumed to be homogeneous. 

The results of the 85°C calculations, which are depicted in 
Figs. 9(a) and 9(b) show, predictably, that the maximum steel 
temperature occurs in the upper area of the inner skin, which 
willinducea compressive thermal stress in this area. However, 
the steel temperature of this and other longitudinally effective 
components does not exceed 65°C in any significant measure. 
On this basis, the Rule standard (i.e. the reference tempera- 
ture) has not been materially exceeded, and a thermal stress 
calculation is not required. However, comparison of the two 
sets of results (kerosene and HFO) illustrates the significant 
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Figure 9(a): H.EO. at 85°C 


effect which varying cargo properties can have upon steel 
temperatures and, therefore, the advisability of establishing 
accurate cargo properties in the design phase. 

Where the results of a temperature distribution calculation 
indicate that essential components of the structure will exceed 
the Rule reference temperature in service, a thermal stress 
calculation may be necessary. For practical reasons, the 
conventional procedure involves comparison of the combined 
longitudinal thermal and hull bending stresses for the 
proposed loading conditions and cargo temperature with 
those corresponding to the Rule reference temperature. Due 
account must be taken of both still water and wave bending 
loads in a variety of loading conditions reflecting the opera- 
tion of the ship. Whilst due regard must be paid to localised 
thermal effects, the main concern is the combination of stresses 
in hull components which must remain effective for longitu- 
dinal strength purposes. Where both stainless and mild steel 
are incorporated, account must be taken of their different ther- 
mal properties. A two-dimensional calculation method in 
which certain basic assumptions are made is satisfactory for 
the generality of chemical tanker structural configurations, 
but in more complex cases a non-linear three-dimensional 
approach might be necessary (Ref. 15). 

Where the combined stresses are found to be in excess of 
experience-related standards, it may be necessary to limit the 
still water bending moment permitted for heated cargo condi- 
tions. Other options, such as increasing the hull modulus, 
limiting the permissible cargo temperature, altering the struc- 
tural arrangements, arranging additional local reinforcement 
or improving the quality of hull materials, are generally less 
practicable and less effective in providing a direct solution. 
However, for small ships, it might be possible to substitute 
transverse for longitudinal framing at the side shell and longi- 
tudinal bulkhead, which can have a marked effect upon 
overall hull constraint and consequently improve the results 
of the thermal stress calculation. 
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Figure 9(b): Kerosene-type cargo at 85°C 


Ship “B’ 

There are few, if any, 12,000 dwt. chemical tankers which are 
of a more interesting structural design than Ship B. It is rela- 
tively unusual for a ship of this size to have such extensive 
internal subdivision, but this feature imparts great flexibility 
of operation by enabling specialised cargoes, which might be 
available in only small parcels, to be carried without leaving 
the tank concerned substantially empty, whilst the capability 
to transport larger parcels has also been maintained. Versatil- 
ity is also assisted by the fact that the wing tanks are cargo 
tanks, water ballast in the cargo area being confined to the 
double bottom tanks. 

All of the cargo tanks, except the ten wing tanks, are suit- 
able for a cargo relative density of 1.9. The wing tanks are 
suitable for a relative density of 1.025. The transverse bulk- 
heads in the centre tanks are horizontally corrugated, the 
corrugations being supported by the longitudinal bulkheads 
and substantial vertical primary members within the tanks. 
The centreline stainless steel bulkhead is vertically corru- 
gated, as are those which subdivide Nos. 4 and 6 centre tanks, 
port and starboard. The outboard continuous longitudinal 
bulkheads are of plane stainless steel construction, with mild 
steel horizontal stiffeners on the outboard side, as for Ship A. 
Inboard of the wing tanks, the cargo tanks are entirely 
constructed of type 316LN solid stainless steel. 

Most importantly, the strength of the transverse primary 
structure for a ship such as this requires to be examined by 
direct calculation and, in view of the structural arrangements 
in way of the transverse bulkheads, a two-dimensional anal- 
ysis is of limited value. Therefore, the structure must be 
modelled on a three-dimensional basis, incorporating the 
main transverse ring structure, including the transverse on 
the upper deck and the double bottom structure in way. 

Whilst the subject matter of the present paper is not 
structural analysis, it is appropriate to outline the complex 


calculations which are necessary if structural integrity and the 
goal of protecting the environment against cargo loss are to 
be attained. The structural idealisation of the three-dimen- 
sional model adopted in this case is depicted in Fig. 10(a). Both 
sides of the ship are modelled in order to permit asymmetrical 
loading of the cargo tanks to be considered. 

Figs. 10(b) and 10(c) depict relevant plots of the deformed 
hull structure in typical loading conditions. 

The stress levels found by this structural analysis proved 
to be generally acceptable, but high relative deflections were 
derived in way of the third and fourth longitudinals above 
the inner bottom ata position clear of the transverse bulkhead. 
This was due to the excessive stiffness of local wing tank brack- 
ets which was resolved by reducing their depth and, 
consequently, the imposed restraint. 

Fig. 11 shows the difference in relative deflection of the 
central deck longitudinals between consecutive flanges of the 
centreline vertically corrugated bulkhead. The deformation of 
the centreline bulkhead indicates considerable rotation of the 
deck support arrangements. It is tempting to consider increas- 
ing the stiffness of the deck longitudinals over the corrugation 
flanges, but this would not significantly limit the rotation and, 
by introducing an increased but inadequate constraint, could 
actually give rise to increased stresses in the deck structure. 

The structure of Nos. 1 and 2 centre tanks P and S on Ship 
B are approved for the carriage of propylene oxide at a pres- 
sure of 0.6 bar gauge. This was achieved with only limited 
reinforcement of the secondary supporting structure in the 
upper region of the tanks. 

Ship B demonstrates an advantageous refinement in cargo 
loading aids. This ship is equipped with remote gauging 
equipment which transmits the cargo quantity in each tank 
directly to the loading computer on a continuous basis, thus 
facilitating a minute by minute monitoring of hull girder 
bending moments and shear forces during loading. 


Ship ‘C’ 

Like Ships A and B, Ship C is approved for the carriage of a 
very large number of chemicals, but in terms of cargo tank 
arrangement and hull configuration, the design has structural 
characteristics which are particularly identifiable with the 
carriage of phosphoric acid —-comparatively large centre tanks 
of generally uniform size suitable for a cargo relative density 
up to 1.88 (which would permit carriage of full cargoes of 
superphosphoric acid), the use of type 317LN solid stainless 
steel (which has a proven record of satisfactory phosphoric 
acid service) and a transversely sloped inner bottom, which 
assists in cargo stripping and the limitation or removal of 
persistent cargo sludge. 

The phosphoric acid predominantly carried by sea is wet 
process acid (WPA), production of which involves the reaction 
of sulphuric acid with phosphatic ore. The ore contains vari- 
ous impurities which remain in suspension in the liquid, and 
a number of these are activators which augment corrosivity 
whilst others are corrosion inhibitors. A balance between acti- 
vators and inhibitors is always desirable, if it can be achieved. 

The presence of fluoride and chloride ions will increase 
the corrosion rate of stainless steel, and the most important 
alloying element in limiting this effect is Cr, although Ni also 
has a beneficial influence and Mo is effective in increasing 
resistance to local corrosion. The cargo tank bottom plating is 
the area most susceptible to pitting ona phosphoric acid tanker, 
and it is not unknown for the sides of cargo tanks on such a 
ship to be of 316L or 316LN, whilst the bottom is of 317L or 
317LN, the 317 grades having increased Cr, Ni and Mo. 

Notwithstanding the qualities of modern stainless steels, 
constant care is necessary in the carriage of phosphoric acid 
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in order to prevent corrosion which could penetrate the cargo 
tank boundaries and then the hull, with serious implications 
for the survival of the ship and preservation of the environ- 
ment. Whilst phosphoric acid is only a pollution Category D 
cargo, numerous hazards could arise from its release, includ- 
ing the loss of other, more seriously pollutant substances from 
tanks on board. In this context, the chemical tanker and its 
contents must always be considered as a whole. 

Itis essential to know as accurately as possible the compo- 
sition and temperature of an intended phosphoric acid cargo. 
In dedicated service these should be substantially predictable, 
but the advice of the stainless steel manufacturers should be 
sought whenever doubt as to material compatability occurs. 
Whilst manufacturers have published guidelines for the assis- 
tance of operators, itis not exceptional for specific cargo liquid 
corrosion tests to be conducted, and certain acid compositions 
might prove to be ineligible for carriage on a given ship on 
this basis. 

Ship C has fresh water tank cleaning arrangements, the 
washing water being stored in port and starboard tanks at the 
aft end of the cargo region (Fig. 2(c)). The use of sea water is 
a particularly undesirable option in cleaning stainless steel 
tanks which have contained phosphoric acid. Unless the cargo 
is sludge-free or has been kept in motion throughout the 
voyage in order to prevent sludge from forming or settling on 
the tank bottom, there is a risk that acids containing large 
concentrations of chloride ions will form between persistent 
sludge deposits and the surface of the bottom of the tank 
during tank washing. These conditions are highly conducive 
to pitting and crevice corrosion. Therefore, even where the 
availability of suitable fresh water is limited, and exposure to 
sea water is unavoidable, this should be strictly controlled and 
the tank washing procedure should commence and finish with 
the use of fresh water. 

As an alternative to the use of stainless steel in phosphoric 
acid service, various lining materials have been proposed for 
application to the interior surfaces of mild steel tanks. Of these, 
the only practicable, maritime service-tested alternative is 
rubber. A number of ships have been built with tanks which 
have smooth internal surfaces suitably prepared and lined 
using self-vulcanising synthetic rubber of 3mm to about 5mm 
thickness. This treatment, which has been comprehensively 
tested experimentally, taking account of ship motions, resultant 
distortions and sloshing loads, has proved to be highly resistant 
to a considerable range of acid compositions in service. 

All chemical tankers with a length of over 65 metres are 
required by the Rules (Ref. 5(1)) to be fitted with an approved 
loading instrument. Notwithstanding compliance with this 
requirement, the loading manual for Ship C also contains a 
comprehensive cargo/ballast handling sequence depicting 
the condition of the ship at frequent intervals throughout the 
loading or discharge procedure, thus demonstrating a 
commendable awareness of the hazards which can occur 
during such operations, as mentioned earlier. 


Ship ‘D’ 

This, the largest of the four examples, demonstrates the degree 
of versatility and cargo segregation demanded by leading 
operators today, and is also representative of the present era 
of ‘environmentally friendly’ chemical tankers. In terms of 
parcel carrying capability, the 37 cargo tanks of varying capac- 
ity ensure that the vessel can deal with the fluctuating 
demands of the market. 

The inclusion of two transverse cofferdams within the 
cargo area provides three entirely separate nests of tanks, 
enabling incompatible groups of cargoes to be fully segre- 
gated without the need to interpose uneconomical empty 
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Figure 10(a): Ship B — structural idealisation 
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Figure 10(b): Ship B - deformed plot, uniform port and starboard loading, shallow draft 
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Figure 10(c): Ship B —- deformed plot, non-uniform loading, shallow draft 
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Figure 11: 
Ship B — deformed plot in way of deck transverse 
and centreline bulkheads 
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tanks if the cargoes between the groups in question are not 
mutually compatible. All transverse bulkheads are horizon- 
tally corrugated, with the exception of the cofferdam 
bulkheads whichare plane, with vertical internal diaphragms. 
All longitudinal bulkheads are vertically corrugated. 

With the exception of a number of mild steel wing tanks 
as indicated in Fig. 2(d), all cargo tank boundaries are 
constructed of solid austenitic stainless steel of grade 316LN 
witha minimum 0.5% proof stress of 265N /mm2 at 65°C. This 
includes most of the main deck plating, inner bottom, inner 
skin, longitudinal bulkheads and transverse bulkheads. 

All internal cofferdam surfaces are fully coated with an 
epoxy coating system. The internal diaphragms are 
constructed from mild steel, with higher tensile material 
incorporated in critical areas. Particular consideration was 
given to the incorporation of access openings at the design 
stage to ensure compliance with the Code and Rule (Ref. 5(a)) 
requirements, whilst at the same time maintaining the 
integrity of the supporting structure. 

All of the stainless steel and mild steel surfaces in the 
ballast spaces (outer wing tanks and double bottoms) are 
protected by coal tar epoxy paint systems, maintenance of 
which is of particular importance due to the possibility of 
bimetallic corrosion. 

For a ship such as this, the possible loading patterns are 
complex and the complexity is increased from the structural 
aspect by the variety of cargo relative densities which can 
occur on a voyage with multiple ports of call. Safety and 
protection of the environment demand that a satisfactory 
standard of strength, particularly longitudinal strength, must 
be ensured. A feature which is not usually encountered on 
this size and type of vessel, is the adoption of higher tensile 


steel for the continuous longitudinal stiffening members, both 
primary and secondary, fitted above the upper deck, and also 
for the plating over the wing ballast tanks. The higher tensile 
steel components include the continuous longitudinal girders 
incorporated to provide adequate end support for the verti- 
cally corrugated longitudinal bulkheads. It was recognised at 
an early stage of design that the incorporation of overdeck 
girders would affect the hull modulus, unless the girders were 
of higher tensile steel. By utilising steel of grade AH32, it was 
possible to accommodate the bending stress occurring at the 
deck girder face plate without adjusting the scantlings of other 
hull girder components (Fig. 12). 

The bulkhead corrugation dimensions are typically 
1200mm deep with a pitch of 1650mm, and plating thick- 
nesses up to 25mm. This necessitates the incorporation of 
increased inner bottom plating thicknesses to enable satisfac- 
tory full penetration welding to be adopted at the base of 
vertical corrugations. 

Animportant consideration, especially when dealing with 
stainless steel plating of this thickness range, is ensuring that 
the delivered material is free from lamellar defects and has 
satisfactory through-thickness properties. The Rules (Ref. 5(f)) 
require through-thickness testing of material over 10mm thick 
which may be strained in a through-thickness direction in 
service. Another precaution taken to detect possible defects 
was the adoption of dye-penetrant testing of the flanged 
corners of the corrugations. This was initially performed on 
100% of the first sections produced. It was found possible later 
to reduce the frequency of testing once a satisfactory level of 
confidence had been established. 

The maximum cargo relative density for which the centre 
tank structure is designed is 1.85, with the exception of 
numbers 2, 6, 8, 10 and 12 centre tanks, which are suitable for 
a density of 2.15. The tanks which are approved for a relative 
density of 1.85 may be partially filled with cargoes of greater 
relative density provided certain limiting criteria are satisfied, 
including parallel filling on both sides of the centreline bulk- 
head. The cargo wing tanks are suitable for relative densities 
up to 1.60. 

For an example such as this, where maximum flexibility 
is an operational requirement, it is desirable that no limitations 


be imposed on tank filling limits. This necessitates the inves- 
tigation of fluid motion characteristics in both the transverse 
and longitudinal directions for representative tanks. From a 
preliminary investigation of the fluid natural periods over a 
range of filling depths, the risk of synchronisation with the 
vessel motions can be evaluated. The next stage is to determine 
the magnitude of likely fluid impacts on the tank boundaries. 
LR’s direct calculation program LR FLUIDS (Ref. 13) is 
available for this purpose. 

The results of the sloshing investigation indicated that 
unrestricted partial filling is acceptable provided the cargo 
relative density does not exceed that for which the tank has 
been approved. Fluid motion velocities for wing tank 2, in the 
pitching mode, are shown in Appendix. 1. 

The construction of the wing ballast tank spaces is worthy 
of note. During the preliminary design phase, it was recog- 
nised that developments in the United States would lead to 
the formulation of requirements which are now incorporated 
in the USCG OPA90 Regulations, (Ref. 16). It was, therefore, 
decided to amend the original layout to fully comply with the 
OPA90 standards. For this size of ship, these require that the 
cargo tank sides be separated from the sea by a minimum of 
(0.5 + Dwt/20,000) m or 2.0 m, whichever is the lesser, but not 
less than 1.0 m. The original design width of 1.3 m was 
increased to 2.0 m in this instance, which necessitated an 
increase in the proposed length of the ship to maintain the 
required cargo capacity. 

Horizontal diaphragms are incorporated in the wing tank 
ballast spaces at approximately 3.0 metres apart. This facili- 
tates ready inspection and maintenance and exceeds the 
minimum recommended requirements for the design of such 
access arrangements laid down by the Oil Tanker Structure 
Cooperative Forum (Ref. 17). 

It is necessary to employ finite element modelling tech- 
niques to verify the structural arrangements and scantlings 
in several areas of a design of this complexity. Notable 
amongst these is appraisal of the horizontally corrugated 
transverse bulkhead structure, particularly in way of the 
intersection with the discontinuous vertically corrugated 
centreline bulkhead. Under conditions of asymmetrical load- 
ing, high rotational forces are imposed on the transverse 
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Figure 12: Ship D — the effect of longitudinal hull bending stress on selection of steel grades 
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Figure 13(a): 
Structural arrangement in way of intersection between 
corrugated transverse and longitudinal bulkheads 


bulkhead horizontal corrugations at the centreline of the ship. 
A satisfactory degree of end constraint is achieved by linking 
the horizontal corrugation webs by plate brackets toa vertical 
stiffening member on the plane portion of the longitudinal 
centreline bulkhead plating adjacent to the transverse bulk- 
head corrugations (Fig. 13(a)). 

In order to assist in maintaining tank cleanliness, the 
brackets follow the angle of the transverse bulkhead corruga- 
tion webs and thus permit unrestricted drainage of cargo 
residues in service. In modelling an arrangement such as this 
for structural analysis, particular attention must be given to 
the shape of the inclined brackets in order to minimise the 
stress concentration on the corrugation flanges in way of the 
bracket toes. The resulting localised fine mesh modelling is 
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shown in Fig. 13(b). A deformed plot of a non-uniform loading 
condition is shown in Fig. 13(c). The maximum resulting stress 
levels at the ends of the brackets were shown by this detailed 
analysis to be within acceptable limits. 

The double bottom under centre tanks 8 and 10, which are 
the widest and largest, must support the maximum cargo rela- 
tive density of 2.15. This requires special consideration of the 
bottom structure, particularly when operating at reduced 
draughts, when deflection will be at a maximum. A bottom 
grillage calculation is essential in order to assess the strength 
of the centreline twin girder, which in these tanks is not 
afforded any support froma superimposed longitudinal bulk- 
head, and consequently has to transmit a major proportion of 
the loads from the transverse floor structure to the transverse 
bulkheads at the ends of the tank. 

In order to avoid excessive combined stresses which could 
occur in the double bottom structure under certain combina- 
tions of draught and relative density, particularly ina hogging 
still-water condition, additional loading guidance is incorpo- 
rated into the loading manual for Ship D. This information, 
in graphical form, covers a range of operating draughts. 

In conclusion, it is apparent that a considerable range of 
advanced analytical methods is commonplace in the design 
and appraisal of modern chemical tanker structures. The 
widespread use of computer techniques is necessary to keep 
pace with the increasingly flexible and sophisticated designs 
being specified by today’s leading operators, whilst maintain- 
ing the required margins of safety and environmental 
protection. 


5. RETROFIT - Significant Examples 


Chemical tankers are often required to add equipment or 
systems during the ship’s service life. Such retrofits may be 
necessary for a number of reasons, for example: 


(i) to ensure compliance following the introduction of new 
regulations, such as the United States Coast Guard 
(USCG) Regulations for Vapour Control Systems (Ref. 10), 
as a result of amendments to existing regulations, for 
example updating of Annex II, or amendments to the 
requirements of the Code for the carriage of particular 
cargoes. 

asa consequence of the owner’s need to improve the spec- 
ification of a ship for chartering purposes, for example 
by obtaining approval for additional cargoes. 


(ii) 


(iii) 


The most notable retroactive regulatory development is 
the introduction of US requirements related to the control of 
vapours displaced from a cargo tank during the transfer of 
crude oil, gasoline blends, benzene and other hazardous 
liquids, as outlined in Section 4.7 of the paper. All tankships 
trading to the United States are required, from 23rd July 1990, 
to be fitted with such a system. 

All retrofits affecting items covered by the Rules or the 
Code require to be approved by the Classification Society and 
the Authority responsible for issuing the International Certifi- 
cate of Fitness. In situations where retrofitted equipment has 
enhanced the ship’s specification, it is normal for the owners 
to request that a fresh certificate be issued if the retrofit makes 
the ship suitable for additional cargoes and the Owner wishes 
to take advantage of the increase in flexibility. 


Figure 13(b): 
Fine mesh model of bracket identified in Fig. 13(a) 


6. OPERATIONAL SAFEGUARDS 


6.1 Safety 


The Code stipulates certain operational requirements which 
include, in the case of cargoes requiring to be carried ona Type 
1 Ship or a Type 2 Ship, an upper limit to the quantity of cargo 
permitted to be carried in a single tank. 

When a cargo is offered for shipment, the operators of the 
ship are required to be provided with all necessary data to 
ensure safe transportation. The operators must use this infor- 
mation to decide whether their ship is suitable for carriage of 
the cargo in question. Their first task is to confirm that the 
cargo is actually included on the International Certificate of 
Fitness and the list of defined cargoes issued for classification 
purposes. If this is not the case, they are required to contact 
the Classification Society and National Authority concerned, 
in order to verify that the ship is suitable for the cargo. They 
are also required to confirm that the relative density of the 
proposed cargo does not exceed the design parameters of the 
cargo tank structure, and that the distribution of loading is 
satisfactory for strength and stability purposes. 


6.2 Cargo Tank Coatings 


In the case of mild steel tanks, a major factor which must be 
addressed is the suitability of the cargo tank coating. The 
manufacturer of the coating system normally supplies the 
ship’s Master with a list of cargoes which are compatible with 
the coating, including relevant information related to cargo 
residence times, exposure conditions and subsequent cargoes. 

This can be a complex subject which must be carefully 
controlled by the Master. Most cargoes are clearly compatible 
or incompatible with specific coatings. Others may only be 
suitable for short-term carriage, after which the coating begins 
to soften and will eventually degenerate. It is possible that a 
fresh cargo may continue a softening process begun by the 
previous one, and it is necessary to consider this point when 
deciding on cargo tank allocation. Cargo and coating compat- 
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Figure 13(c): 
Deformed plan of structure modelled in Fig. 13(b) 


ibility may also depend upon factors such as the mixture 
concentration of a cargo, its carriage temperature and the age 
of the coating. 


6.3 Pollution Prevention 


In order to ensure compliance with the requirements for 
discharge of cargo residue / water mixtures in accordance with 
Annex II, chemical tankers must be provided with an 
approved Procedures and Arrangements (P and A) Manual. 
This manual may be consulted by Port State Authorities to 
confirm that the ship is following the correct operational 
practices. 

The P and A Manual is required to contain detailed infor- 
mation about the ship’s cargo and ballast systems, the cargo 
tank venting and heating systems and details of the general 
arrangement of the ship. Operational information must be 
included with respect to the discharging of the cargo tanks 
and the procedures to be followed during subsequent cargo 
stripping operations, such that allowable maximum residue 
quantities are not exceeded. To ensure that the cargo 
residue/water mixtures which remain on board following 
cargo unloading and subsequent tank cleaning are discharged 
in accordance with the requirements of Annex II, the proce- 
dure for each pollution category is defined. This information 
is also given in the form of easy to follow flowcharts. A list of 
cargoes, together with details such as their melting point, 
viscosity and vapour pressure, must be included, also a table 
giving the capacity of each cargo tank and the maximum 
residue quantity achieved under test conditions. ; 

All cargo movements on board, including the disposal of 
cargo residue / water mixtures, are required to be listed in the 
ship’s cargo record book, which is regularly examined by 
inspectors carrying out port state control surveys. 

On-board familiarity with the contents of the P and A 
Manual and diligent completion of entries in the cargo record 
book are essential to satisfactory operation of the ship in 
compliance with Annex II, the responsibility for which rests 
with the Master. 


6.4 Fire-Extinguishing Installations 


International Certificates of Fitness issued by LR contain oper- 
ational notes which, amongst other things, require it to be 
verified that the installed fire-fighting system is suitable for 
the intended cargoes. If any cargoes which are not compatible 
with the fixed deck foam fire extinguishing system are 
proposed for carriage, the Code and Rules (Ref. 5(a)) require 
that appropriate additional arrangements be provided. In any 
instance of doubt, the operator or Master is required to contact 
LR’s Headquarters to determine if additional arrangements 
are required. 


6.5 Personnel Protection and Safety 


For operational safety, itis necessary to consider the arrange- 
ments required to protect the crew continuously against the 
liquid and vapour hazards which are present on board 
chemical tankers. 

Many cargoes which are regularly carried are hazardous 
if liquid or vapour comes into contact with the skin or eyes, 
if the liquid is ingested, or if the vapour is inhaled. When 
handling cargoes such as creosote (wood), the crew must be 
provided with protective aprons or coveralls, special gloves 
with long sleeves, suitable footwear and goggles or a face 
shield. A minimum of five sets of this equipment must be 
available onboard. Once used, the equipment is considered to 
have been contaminated with cargo and cannot be stored in 
the accommodation unless it is kept in a separate purpose- 
built storage area or has been thoroughly cleaned. 

The crews of ships carrying toxic substances are required 
to be provided with at least three sets of chemical ‘Safety 
Equipment’, in addition to those required for conventional 
SOLAS purposes. Each set consists of a self-contained air 
breathing apparatus, protective clothing, boots, gloves, 
goggles, fire proof lifeline and an explosion-proof lamp. At 
least one set of spare air bottles is required for each breathing 
apparatus, together witha suitable air compressor and a mani- 
fold for charging the air bottles. Alternatively, fully charged 
spare air bottles, with a free air capacity of 6,000 litres, must 
be provided for each set of Safety Equipment. 

To detect the presence of flammable or toxic vapours, ships 
carrying cargoes which emit such vapours are required to be 
provided with two sets of portable vapour detection equip- 
ment. It is normal practice on modern chemical tankers to 
provide separate equipment for flammable or toxic vapours. 
One set of portable equipment may be replaced by a fixed 
system, but such an arrangement is unusual. When carrying 
cargoes for which vapour detecting equipment is not avail- 
able, ships are required to be provided with additional sets of 
breathing apparatus, and a guidance note to this effect is 
included on International Certificates of Fitness issued by LR. 
None of the ships described in this paper are fitted witha fixed 
vapour detection system, relying instead on the use of 
portable equipment, and in practice any chemical tanker 
which is approved for a wide range of cargoes requires the 
additional breathing apparatus. 

Prior to entry into spaces which may contain hazardous 
toxic or flammable vapours, it is essential that these spaces be 
checked to confirm that such vapours are not present, and that 
sufficient oxygen is present to provide a breathable atmo- 
sphere. Where the criteria for entry into a space have not been 
satisfied, it is necessary to ventilate the space using fixed or 
portable ventilation systems. It is also essential that the venti- 
lation system should be able to reach all parts of the space, 
and it may be necessary in some circumstances to provide 
portable trunking or hoses to reach the lower parts of spaces 
such as cofferdams and ballast tanks. 
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To cater for situations where members of the crew have 
been splashed with cargo, the ship must be fitted with at least 
two showers and two eyewash stations on the cargo tank deck. 
These installations must be spaced widely apart and be avail- 
able for instant use at all times when the cargo is being loaded, 
discharged or transferred, irrespective of the ambient weather 
conditions. 

Itis the Master’s responsibility to ensure that, prior to leav- 
ing port, oxygen resuscitation equipment and antidotes for 
each cargo carried are readily available on board. The anti- 
dotes are listed in the Medical First Aid Guide, (Ref. 18). All 
International Certificates of Fitness issued by LR contain an 
operational note drawing this requirement to the attention of 
the Master. 

Every chemical tanker, irrespective of the cargoes being 
carried, is required to be supplied with emergency equipment, 
including a stretcher which is suitable for rescuing and hoist- 
ing injured personnel from spaces such as cofferdams, cargo 
or ballast pump rooms and void spaces or ballast tanks within 
the cargo area. Tests may be required in order to demonstrate 
that efficient evacuation can be achieved. 

In the case of a major emergency which necessitates aban- 
doning the ship, the crew will be required to withdraw to the 
accommodation whilst the lifeboat crew prepare the lifeboats 
for embarkation. Within the accommodation citadel, each 
member of the crew is provided with a self-contained breath- 
ing apparatus of fifteen minutes duration which, in the case 
of an emergency involving harmful vapours, is intended to 
enable the crew to transfer safely to the lifeboats. Since 1986, 
the lifeboats must be of the totally enclosed self-righting type. 
Once inside, crew members are expected to be able to survive 
using the self-contained air supply with which such boats are 
fitted. The lifeboats are also required to be provided with an 
external fire-fighting system so that the ship can be evacuated 
safely in an emergency involving fire. 

Additional comprehensive operational guidance is 
contained in Ref. 8. 


7. REGULATORY COMPLIANCE 


The regulatory role of national authorities in implementing 
their own requirements and those of international conven- 
tions, including the Code, is widely comprehended, and it is 
not the purpose of this paper to re-explain that which is well 
known. However, in the experience of the authors, the function 
of Classification Societies in connection with the Code and 
other international convention requirements is less compre- 
hensively understood, although frequently mentioned when 
questions arise from, for example, port state control inspec- 
tions. In addressing the implementation of statutory-related 
requirements by the Classification Societies, the authors speak 
only for Lloyd’s Register. 

The historical purpose of classification was to improve the 
protection of property and life against the environment, rather 
than the converse, which is, understandably, a current preoc- 
cupation. In the present day, when international commerce, 
travel and communication are matters of routine, observers 
may be tempted to forget the perils of a hostile sea and assume 
that a combination of technology and management will over- 
come all obstacles. The maritime environment will continue 
toremind us that this is not the case, but in relative terms much 
of the purpose of classification has been realised over the last 
two hundred years, and will continue to advance, provided 
vigilance against complacency is maintained. 

In addition to their classification function, the major Soci- 
eties have been authorised by more than 125 national 
authorities to apply the requirements of the various interna- 
tional conventions, and to issue the necessary certificates, 
including International Certificates of Fitness for the Carriage 
of Dangerous Chemicals in Bulk, as provided for in the Code, 
in accordance with SOLAS 74. The text of the Code has been 
incorporated into the Rules, which deal with many other 
matters also, for example the derivation of scantlings. Those 
aspects which are operational are not subject to control by clas- 
sification approval procedures or periodical surveys and must 
remain the responsibility of owners and operators. 

The Rules (Ref. 5(a)) provide for the inclusion of the nota- 
tions Ship Type 1, 2 or 3, as appropriate, in the classification 
notation of chemical tankers for which LR has directly verified 
compliance with the ship survival capability (damage stabil- 
ity) provisions of the Code as a consequence of having been 
authorised to issue the International Certificate of Fitness. In 
the limited number of instances in which an Administration 
has not authorised LR to issue the International Certificate of 
Fitness, the responsibility for verification of compliance with 
survivability requirements rests with the national authority. 
The Rules then require the assignment of an asterisk in asso- 
ciation with the Ship Type notation, i.e., Ship Type 1*, 2* or 3*. 

The assignment of a Ship Type designation or notation 
does not imply that a ship is suitable for the carriage of all 
cargoes which are permitted by the Code or the Rules to be 
carried on that particular Ship Type. Those cargoes for which 
the ship has been specifically approved are listed on the Inter- 
national Certificate of Fitness and ona List of Defined Cargoes 
which is attached to the Classification Certificate (Appendix 
2). From the outset of the introduction of LR classification 
requirements for chemical tankers in 1971, it has been the prac- 
tice to issue a list of approved or defined cargoes for 
classification purposes. This approved cargo list can include 
more substances than those included on the International 
Certificate of Fitness, as explained below. 

The Code itself contains two tabulated lists of cargoes — 
those which have been evaluated and found to be within its 
scope (Chapter 17) and those which have been evaluated and 
found not to be so (Chapter 18). The latter includes numerous 
Annex II category D cargoes. Categories A, B and C are 
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automatically within the scope of the Code under the pollu- 
tion hazard evaluation criteria mentioned in Section 3 of the 
paper. An International Certificate of Fitness issued in accor- 
dance with the Code must include those of the intended 
cargoes which are within the scope of the Code or Annex II, 
necessitating the inclusion of not only Chapter 17 cargoes, but 
also relevant Chapter 18 category D substances. 

Numerous cargoes which are listed in Chapter 18, 
although not sufficiently hazardous to be within the scope of 
the Code, are not innocuous or immune from particular 
carriage requirements. For example, triisopropanolamine 
(melting point about 58°C) is included, also a number of low 
boiling point cargoes, low flash point liquids and substances 
which are incompatible with certain materials conventionally 
used on chemical tankers. In the introduction to Chapter 18, 
the text of the Code states that Administrations should 
prescribe appropriate safety requirements for the cargoes 
listed thereunder. In practice, requirements relating to the 
carriage of chemical cargoes which are not regulated under 
the Code are addressed mainly by the Classification Societies. 
Therefore, the Rules (Ref. 5(a)) require that those cargoes from 
both Chapters 17 and 18 for which the ship has been approved 
are included on the List of Defined Cargoes for classification 
purposes, as attached to the Classification Certificate. The 
inclusion of Chapter 18 cargoes on this list does not depend 
upon their being within the scope of Annex II. 

The intended cargo list, which may contain many 
hundreds of chemicals, is the cornerstone of chemical tanker 
design and appraisal. In order to simplify these tasks, LR has 
developed a PC-based program known as Chemship, which 
provides a wide range of assistance during the construction 
phase and service life of a ship. The program options include 
the definition of ship requirements for a proposed list of 
cargoes, derivation of a suitable cargo list for a given design, 
tabulation of cargoes and relevant information for certifica- 
tion purposes, and investigation of the effect which an 
equipment upgrade would have on the cargo list of a ship 
which is in service. Typical output is shown in Appendix 3. 

In the few instances in which a ship has been approved 
only for a single or very limited number of chemicals, for 
example where a dedicated service is contemplated or the 
facility to transport low flash point cargoes is not required, 
the Rule requirements are adapted accordingly. In such cases, 
a specific reference to the cargo or cargoes is included in the 
class notation. The range of classification and additional nota- 
tions available to chemical tankers is defined in the Rules 
(Refs. 5(a) and 5(m)). 


ad 


8. THE FUTURE 


Current international statutory developments relating specif- 
ically to chemical tankers include housekeeping matters such 
as the recent IMO decision to amalgamate the lists of cargoes 
which hitherto were separately included in the Code and 
Annex II. From Ist July 1994, only the Code has contained a 
cargo list, to which Annex II cross refers. This amendment is 
intended to eliminate duplication of work in maintaining the 
regulations at [MO and should also reduce misunderstanding 
in operation. 

The Code now contains a revised Chapter 8 (Cargo Tank 

fenting and Gas Freeing Arrangements) which is applicable 
to ships constructed on or after Ist January 1994. New require- 
ments relating to gas freeing have been introduced, with the 
intention of minimizing hazards due to the presence and 
dispersal of flammable or toxic vapours during such opera- 
tions. The items addressed include gas freeing outlet locations, 
efflux velocities and the use of devices to prevent the passage 
of flame. The provisions of the Code in this respect have now 
been harmonised with those of SOLAS 74 Chapter II-2 
Regulation 59. 

A new Chapter 20 has been incorporated in order to 
address international transboundary movement of liquid 
chemical wastes which are offered for shipment in bulk 
between or through different national jurisdictions. The 
main thrust of the new chapter is that the ship must comply 
with various notification, documentation and operational 
procedures in addition to other requirements of the Code. A 
Ship Type 2 is required for such cargoes, unless the Admin- 
istration considers that there are clear grounds for requiring 
carriage on a Ship Type 1. These provisions are applicable 
from Ist July 1994. 

The preamble to MARPOL 73/78 expresses the aim of 
parties to the convention to achieve elimination of intentional 
pollution of the marine environment from ships and to 
minimise accidental pollution from this source. These aspira- 
tions virtually guarantee that there will be continuing efforts 
to improve cargo discharge, tank stripping and tank cleaning 
standards, which might result in virtually all cargo tanks on 
chemical tankers having smooth interiors, i.e. double bottoms 
and double skins. As is evident from Section 4 of the paper, a 
major proportion of chemical tankage is of this type already. 
However, as the extent of cofferdams and ballast spaces is 
progressively increased, the provision of satisfactory access 
arrangements to and within such spaces will become increas- 
ingly important, and due regard must be paid to the necessity 
for survey and timely maintenance of structure and protective 
coatings in service. 

There are further proposals to conduct a complete review 
of Annex II with the commendable intentions of simplifying 
its requirements, increasing its effectiveness, and removing 
inconsistencies with Annex I. The target date for completion 
of this work at IMO is 1996. The review is intended to include 
consideration of floating lypophilic substances which adhere 
to and penetrate the plumage of birds. Animal and fish oils 
or fats, also vegetable oils, which are category D substances, 
are capable of causing such harm. At present, IMO has recom- 
mended to Administrations that additional stripping and 
discharge controls should be implemented in operations 
involving cargoes of this type. 

In view of the requirement under Regulation 26 of 
MARPOL Annex I for all new oil tankers to carry a Shipboard 
Oil Pollution Emergency Plan, there is a current proposal at 
IMO to add a corresponding regulation to Annex II in order 
to cover the spillage of noxious liquid substances. A perti- 
nent regulation has been drafted, but remains to be further 
considered within IMO. 
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There is increasing emphasis at IMO and elsewhere on the 
role of the human element in the context of safety, including 
organisational aspects and the responsibilities of shipowners, 
managers and operators. Associated work is underway to 
simplify and standardize the terminology used in IMO instru- 
ments, and a principal area of development is that relating to 
safety management. This concept is neither peculiar to chem- 
ical tankers nor new to prominent chemical tanker owners. 
The principles have been documented elsewhere (Ref. 19). At 
the time of writing, dates for mandatory implementation of 
the IMO International Safety Management (ISM) Code, which 
will become Chapter IX of SOLAS 74, remain to be finalised. 
However, member states have been urged to arrange imple- 
mentation by Ist June 1998, giving priority to several types of 
ships, including chemical tankers. As the operating company 
of a ship may not be domiciled in the flag state which will be 
responsible for certifying compliance with safety manage- 
ment criteria, shore-based systems will be separately certified 
for compliance with the ISM Code. LR’s Quality Services 
Department and subsidiary company Lloyd’s Register Qual- 
ity Assurance (LRQA) will co-ordinate certification of both 
ship and shore-based safety management systems. 

At a national level, but with international implications, 
the United States requirements for marine vapour emission 
control systems (Ref. 10), mentioned in Section 4.7 of the paper, 
are applicable to the carriage of crude oil, gasoline blends and 
chemical cargoes on all tankers. Specific requirements remain 
to be finalised for polymerising or toxic vapours, also for 
cargoes of differing vapour growth rates or relative densities. 
As also mentioned earlier, IMO has published standards for 
vapour emission control systems, compliance with which is 
not mandatory on an international basis, but implementation 
is at the discretion of the various flag and port states. As a 
consequence of continental and global initiatives, it is likely 
that the adoption of measures to control vapour emission will 
widen and intensify internationally. 

Chemical tanker operators are at the cutting edge of 
survey and inspection procedures, perhaps to a greater extent 
than in the case of any other type of cargo ship. In addition to 
classification surveys, statutory surveys and port state control 
inspections, operators find their ships subject to multiple 
examinations by a variety of inspectors, including those acting 
for producers or shippers, underwriters and P&I clubs. It can 
be seriously counterproductive for the concentration of 
inspections required on board a chemical tanker during a short 
in-port period, when the demands of cargo handling are crit- 
ical, to be permitted to intensify. It is understood to be a 
primary aim of certain elements of the industry to bring about 
a reduction in the number of non-regulatory inspections. 
Towards this end, CEFIC, the European Council of Chemical 
Manufacturers’ Federations, has commenced implementation 
of a ship-inspection and management-auditing system under 
the International Chemical Environment (ICE) Project. The 
procedure involves completion of a ship inspection report, 
including a very extensive checklist, as part of a ‘Quality 
Rating System — Management of Ship Operations’. European 
shippers and shipowners are reported to have agreed arrange- 
ments for managing independent inspections and audits 
using CEFIC criteria, with a view also to ensuring a uniform 
standard of inspection internationally. Nevertheless, the 
development remains to be evaluated in operation and is 
being closely observed by interested parties. 

The CEFIC inspection overlaps statutory and classifica- 
tion survey regimes which it cannot replace. Such surveys are 
required to be conducted by authorised Surveyors in accor- 
dance with the requirements of various international 
conventions and the Classification Survey Regulations. The 
CEFIC audit duplicates a number of these procedures, which 
does not appear to assist its original purpose. 


It is well known that the maritime industries aspire to 
higher standards of design, construction and in-service relia- 
bility, and LR has introduced a comprehensive procedure 
known as ShipRight as a means of enhancing ship safety. The 
ShipRight system commences with design guidance, including 
structural design assessment, fatigue design assessment, 
construction monitoring and the optional adoption of 
enhanced scantlings. During the service life of a ship, the 
procedure provides for hull condition monitoring, the use of 
protective coatings, ship event analysis and ship emergency 
response, all of which contribute to protection of both the ship 
and the environment. Certain elements are mandatory for new 
oil tankers over 190 metres in length and other ships where 
demanded by the type, size and structural configuration. In 
other cases, ShipRight can be adopted by owners who wish to 
achieve a high level of confidence, and a number of elements 
are available for retrospective application where this is appro- 
priate. Compliance with ShipRight is recorded by the 
assignment of additional notations which appear on the Clas- 
sification Certificate in association with the class notation, and 
also in the Register Book, where the ship particulars are 
recorded. 

LR’s Chemical Tanker Rules have been in a constant state 
of evolution and development for over 20 years, and this will 
continue, as will the emergence of fresh statutory require- 
ments from IMO. The range, complexity and constantly 
increasing volume of rules and regulations require the intro- 
duction of systems which facilitate ready identification of, and 
access to, pertinent information. It is to meet these needs that 
LR has developed the interactive computer database system 
known as Rulefinder, which provides subscribers with user- 
friendly and immediate access to the Rules and international 
statutory regulations, including national flag interpretations 
of convention requirements. 

There is increasing awareness that the classification Rules 
contain essential standards without which implementation of 
international conventions could not be achieved effectively. 
For example, classification with a society which can deploy 
adequate human and technological resources internationally 
is the predominant means of ensuring ongoing compliance 
with the Load Line Convention. SOLAS 74 relies upon the 
detailed standards for materials, hull structure and essential 
machinery systems which have been incorporated into clas- 
sification Rules over many years on the basis of considerable 
research and extensive service experience. The Code arguably 
takes over from where classification leaves off, in that it 
addresses cargo containment on the assumption that the hull 
is strong enough and the essential shipboard machinery is 
sound. The importance of classification standards in associa- 
tion with unrelenting demands for further increases in safety 
and environmental protection, particularly in the case of 
chemical tankers and other ships which carry hazardous 
cargoes, could possibly result in classification with a major 
Classification Society becoming an international statutory 
requirement, if IMO member states adopt such a policy 
(Ref. 20). 

There is a body of opinion which considers that the 
prescriptive regulatory requirements which have governed 
ship design, construction and operation historically should 
give way toa ‘safety case’ evaluation or ‘formal safety assess- 
ment’ of each ship. This is too complex an issue to be addressed 
in detail in the present paper, but, as the ‘safety system’ 
concept has been well known for many years in land-based 
chemical industries, it is appropriate to consider certain impli- 
cations of the proposal: 

Firstly, it is inaccurate to consider that classification Rules 
are entirely prescriptive. As described in Section 4.9 of the 
paper, for example, complex and innovatory structural 
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designs are required by LR Rules to be evaluated using direct 
calculation procedures which extensively replace the formu- 
latory approach traditionally adopted for hull components. 
Nevertheless, the Rule formulae, which are scientifically 
based and continuously calibrated against service experience, 
enable a designer to establish structural arrangements and 
scantlings both rapidly and cost-effectively. 

Secondly, the building of ships in large series is rare and 
is likely to remain so, as evidenced by the fact that, even in 
similar trades, different operators employ ships which are 
dissimilar in many respects, as a result of their own experi- 
ence. The diversity of ship types, cargoes, operational 
environments and commercial constraints virtually precludes 
meaningful comparison with the industries upon which the 
proponents of formal safety assessment base their case. 

Thirdly, the statutory bodies responsible for evaluating 
the safety case would require to have the technical ability and 
resources necessary to conduct the task, taking account of all 
significant hazards. Clearly, this would require the application 
of major resources in dealing witha ship as complex as a chem- 
ical tanker which must be approved for an extensive list of 
cargoes and is intended to operate throughout the world. 

These comments are not exhaustive, but may serve to indi- 
cate that any future proposals to replace or radically reform 
the prescriptive approach should not proceed on the basis of 
unproven necessity or doubtful parallels, but must be suffi- 
ciently researched to ensure that no overall reduction in 
present safety standards might inadvertently result from well- 
intended innovation. 


9. CONCLUSION 


$ Owners and operators carry the prime responsibility for safety 


and the prevention of pollution from ships. Regulations can 
provide an adequate regime of controls but, in the final 
analysis, a safety culture develops from within. 

The complexity of the modern chemical tanker exceeds 
anything which could have been predicted during the early 
days of transportation of hazardous liquids by sea. It is easy 
to forget the progressive transformation which international 
development has brought about in ships during the last fifty 
years. Relatively few cargo ships are simply the floating ware- 
houses which predominated in the past. The technology 
which is now commonly, and of necessity, employed in order 
to maintain safety and cargo quality on ships such as chemical 
tankers would have been astounding to earlier generations of 
naval architects, marine engineers and mariners, who would 
barely have dreamt of attempting to transport such hazardous 
cargoes in bulk across the seas of the world. It is not difficult 
to comprehend that it is now the environment which requires 
protection, or to identify developments which have 
contributed to the change. 

Nevertheless, designers and operators who were involved 
in the bulk transportation of liquid chemicals at the inception 
of the trade anticipated much of today’s regulatory frame- 
work. It is to their credit that they did not rely upon, or 
passively await, the development of detailed mandatory 
requirements, but set standards based upon knowledge of the 
cargoes, good engineering judgement and sensible caution. 

There have been instances in which regulators, with the 
best intentions, have found themselves in danger of under- 
mining safe systems of operation. Nevertheless, properly 
considered regulatory and advisory regimes are essential. 
This is likely to become increasingly so as environmental 
concerns increase and less experienced operators become 
more heavily involved in the trade. The combination of knowl- 
edge and caution which characterised the pioneers of bulk 
liquid chemical transportation is as necessary today as it was 
fifty years ago. 
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APPENDIX 2 


Approved List of Defined Chemical Cargoes 


Ship Name: EXAMPLE 


LR No: 1234567 


The above named ship has been approved for the carriage of the cargoes listed hereunder, in the tanks indicated, on 


the understanding that:- 

L All operational requirements related to their carriage and containment will be fully complied with. 

Il. The manufacturer’s recommendations will be fully complied with, in respect of tank coatings, stainless 
steel, linings and other materials. 

Il. The maximum temperature of carriage will not exceed 65 degrees Centigrade. 

IV. The cargo tanks have been approved for 100% filling with the following maximum cargo densities:- 

Tank Numbers Relative density 

Centre Tanks All 1.2 


Where cargoes having relative densities in excess of these values have been approved, the depth of filling 
for the tank concerned is not to exceed:- 


Depth of tank X Relative density for which the tank has been approved 


Relative density of cargo 


V. Certain cargoes having low boiling points may require operational procedures to control the cargo 
temperature in service. 


VI. Fruit juices, peel oil etc have been included although they may require refrigeration and stainless steel 
tanks for cargo quality reasons. 


Conditions of Carriage | 


Product 


Notes Tank Groups | 


ALCOHOLIC BEVERAGES, n.0.s. 
ALKANES (C6-C9) 


Tank Group Key 
Tank Group Tank Group Type Tank List 
1 CENTRE 1TO6P+S 


Operational Notes 


1 The minimum required gas group for electrical equipment when carrying this cargo is not given in the 
IMO Code and cannot be ascertained from other known reliable sources. It should therefore be ensured, 
when loading this cargo, that the vessel is not subjected to a hazard in excess of that for which the 
electrical equipment in the hazardous zones is designed. 


Date Issued: 23 March 1994 


NOTICE - This certificate is subject to the terms and conditions overleaf, which form part of this certificate. 
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APPENDIX 3 


TANK GROUPS SUITABLE MISCIBLE 

FIT FOR FOR IN WATER 
CARRIAGE 
(See Notes) 


SUBSTANCE 


ACETIC ACID 

ACETIC ANHYDRIDE 

ACETONE CYANOHYORIN 
ACETONITRILE 

ACRYLAMIDE SOLUTION (50% or less) 
ACRYLIC ACID 

ACRYLONITRILE 


ACRYLONITRILE STYRENE COPOLYMER 
DISPERSION IN POLYETHER POLYOL 


ADIPONITRILE 

ALACHLOR TECHNICAL (90% or more) 
ALCOHOL (C12-C15) POLY (1-6) ETHOXYLATES 
ALCOHOL (C12-C15) POLY (7-19) ETHOXYLATES 
ALCOHOL (C12-C15) POLY (20 +) ETHOXYLATES 


ALCOHOL (C6-C17) (secondary) POLY (3-6) 
ETHOXYLATES 
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SYNOPSIS 


This paper commences with definitions of the terms condition 
monitoring, performance monitoring and planned mainte- 
nance, and the relationship between them. It continues with a 
brief overview of the research and development activities 
which have been undertaken by LR in this field over the last 
10 to 15 years. 

Succeeding pages contain a summary of the knowledge 
gained from this work, together with that obtained from the 
practical application of condition monitoring systems at sea. 
This embraces both the condition monitoring techniques avail- 
able and a review of a number of the analytical methods in use. 
A description of the present LR condition monitoring system 
for rotating machinery, which is in use at sea in some numbers, 
concludes the descriptive part of the paper. 

Discussion then moves on to examine future developments 
in condition monitoring, and some implications for ship oper- 
ators and survey requirements. In the concluding section, 
current views on various aspects of condition monitoring and 
its application to maintenance management, are summarised. 


1. INTRODUCTION 


Condition monitoring technology offers the potential for 
considerable increases in the level of confidence which can be 
placed in machinery health assessment in comparison with 
traditional inspection practices. It follows, therefore, that 
Lloyd’s Register’s progressive programme, of research and 
development to advance practical condition monitoring appli- 
cations, specifically assists the promotion of standards of safety 
and quality in the marine and other industries world-wide. 
These are high in the list of Lloyd’s Register’s declared objec- 
tives. 

As condition monitoring technology develops it will 
continue to generate increasing confidence in its effectiveness, 
whilst time-based inspection methods are likely to have 
reached their limits. This means that condition monitoring 
provides Lloyd’s Register with one route towards the contin- 
uous improvement of safety during the operating phases of the 
life cycles of surveyed products. In addition, the cost saving 
implications for maintenance and optimisation of performance 
provide Lloyd's Register with the opportunity to discharge its 
safety responsibilities whilst adding value to its services. This 
will enhance competitiveness and should prove to be of immea- 
surable commercial importance. 

Machinery condition monitoring is not new. Marine engi- 
neers have been monitoring the condition of machinery for 
years through their senses of sight, touch, smell and hearing 
coupled with their own deductive powers. Today, much effort 
is being expended both to replicate these human sensory moni- 
tors by automation and to extend the range of information 
available. 

The application of condition monitoring methods allows 
maintenance to be related more directly to the general health 
of machine and system. The overall results of such application 
are a reduction in maintenance requirements and an improve- 
ment in equipment reliability. These and other effects have been 
shown to reduce operating costs. 

Condition monitoring systems which directly measure 
wear, or other damage to components, provide the most reliable 
information about component deterioration and fitness for 
further service. Where direct measurement is not practicable, 
indirect methods must be used. Of these, the most successful 
and widely used is vibration measurement. This method 
enables machine deterioration to be detected, and many kinds 
of faults to be identified, through the application of well estab- 
lished diagnostic relationships. 

Where neither of these approaches can produce useful 
results, measurements of various performance parameters can 
be analysed, to detect the onset of malfunction and determine 
the cause. This approach is used in diesel engine condition 
monitoring. Unfortunately at present, complete reliability of 
diagnosis is difficult to achieve due to the complexity of the 
measured processes and the variability of other influences, 
such as ambient conditions, fuel quality and engine load. 

The reliability of an individual machine is an inherent char- 
acteristic which is not altered by monitoring its condition. It is 
expected that condition monitoring technology will increase 
periods of satisfactory operation, minimise the unnecessary 
shut down ofa healthy machine for time based inspections and 
detect faults which might cause its unexpected failure. Where 
a stand-by machine is available it can then be put into operation 
to maintain the required service, so improving the overall oper- 
ating reliability of the plant. However, these improvements also 
depend upon the internal reliability of condition monitoring 
systems themselves. This reliability is influenced by the sensors 
used, the visibility thresholds of the observed conditions and 
the analytical capability for detecting and diagnosing faults. 


2. THE ROLES OF CONDITION AND 
PERFORMANCE MONITORING IN 
PLANNED MAINTENANCE. 


These three aspects—condition monitoring, performance moni- 
toring and planned maintenance, although related, are distinct 
functions. 

Planned maintenance normally includes the following cate- 
gories: 


¢ Preventive maintenance. Items are opened out for inspec- 
tion and overhaul, or replacement at specified time 
periods or after a specified number of running hours. 


. Corrective maintenance. Sometimes referred to as break- 
down maintenance. 


¢ Life replacement maintenance. The component or machine 
is run to destruction and then replaced. While this cannot 
be considered as maintenance of that component, it is 
maintenance to the overall system. 


¢ Condition based maintenance. Dictated by the performance 
or physical state of the machine. 


The “condition based maintenance” component forms the link 
with condition monitoring and performance monitoring. 

Condition monitoring means the non-invasive surveillance 
of engineering systems to obtain knowledge of their condition; 
to distinguish wear, impending failure or other deterioration, 
without disruption of the normal operating profile of those 
systems. 

Performance monitoring is also surveillance, by the record- 
ing and evaluation of measurable performance parameters. In 
general it relates to the efficiency of the machinery or plant. 
There is clearly a link between condition and performance 
monitoring where, for example, the wear of components or 
other deviations from design conditions influences the overall 
performance. However, it is seldom easy to determine the 
causative condition from observed changes in performance 
parameter values alone. 


2.1 Condition Monitoring. 


The purpose of condition monitoring in the marine industry is 
to determine whether a hull, machine, system or other compo- 
nent is satisfactory or whether it requires maintenance. Such 
entities may become unsatisfactory for a number of reasons, 
such as: 


¢ Condition, deteriorated to, or beyond, acceptable limits. 


¢ Danger of complete functional failure. 


¢ Energy consumption increased to an unacceptable level 
due to deterioration of the various components. 


Condition and performance monitoring systems should assist 
the user to plan maintenance activities. The information needed 
is normally provided by the answers to the following questions: 
¢ Is the machine or system operating satisfactorily? If not: 
¢ Is deterioration serious? and, 


¢ When will maintenance be necessary? 


With direct measurement of a component which has a defined 
limit of wear before repair is required, it is normally not difficult 
to classify its deterioration and estimate its remaining life. This 


is the case where shaft bearing wear-down can be easily 
measured. In some cases, it may be practicable to measure 
component wear whilst machines are running; for example, the 
piston ring wear measurement systems of some diesel engines. 
Thus, the information needed for maintenance planning can be 
obtained reasonably directly. 

Where an indirect method, such as the vibration measure- 
ment of an electric motor driven pump, is used, the readings 
can show quickly whether the overall vibration level is accept- 
able. If this is not so, the nature and significance of deterioration 
can be determined only when time-based vibration data has 
been analysed. The results of this analysis may be supported 
by comparisons with previously recorded measurements to 
obtain more accurate assessments of condition. Experienced 
interpretation of this information then can be used to assist 
maintenance planning decisions. 


2.2 Performance Monitoring. 


The primary aim of performance monitoring is to facilitate the 
adjustment of machines and systems to produce efficient oper- 
ation at desired ratings. However, when analysed and 
interpreted correctly, performance data can provide indications 
of machine or system condition. 

Although the ability to derive information about wear and 
component deterioration from performance data is rather more 
limited than from more direct measurements, useful informa- 
tion can be obtained from the analysis and plotting of trends 
of parameter measurements repeated regularly. This informa- 
tion, when considered in relation to records of deterioration 
obtained during previous overhauls, can assist the planning of 
maintenance activities. In addition, measurements and trends 
of fuel or power consumption, output, and hence efficiency, 
may be obtained, further to support maintenance decisions. 

The regular monitoring and analysis of performance param- 
eters can also provide valuable assurance to operators that no 
detectable deviations are occurring and measured parameter 
values are normal. 


2.3 Planned Maintenance. 


Planned maintenance is intended to assist the reliable operation 
of machinery and systems by means of a phased programme. 
Its effectiveness is improved by applying condition monitoring 
techniques which can enable safe and reliable operation 
beyond normal preventive maintenance times; alternatively, 
condition monitoring may detect faults before planned main- 
tenance is due. Therefore, the benefits of condition monitoring 
are gained either from the longer useful life of wearing compo- 
nents, increased machine and system availability and reduced 
time spent on maintenance, or from the avoidance of unex- 
pected failures and possible consequential damage. 

If the first purpose of condition monitoring is achieved, 
maintenance will be carried out when one or more components 
have reached the end of their useful lives. However, often there 
will be components which have been removed in the course of 
condition based maintenance which have some useful life 
remaining. If it is judged that they will not last for a further 
extended operating period, they may be replaced at the same 
time as worn out components. In such cases cost savings, result- 
ing from applied condition monitoring, are limited by the wear 
criteria of individual components. 

The benefits of extended periods between maintenance 
activities afforded by condition based maintenance can also be 
applied to survey activities in appropriate cases. LR approved 
planned maintenance schemes for ships provide for condition 
based maintenance of machinery equipped with appropriate 
monitoring arrangements. This allows for the submission of 


monitored readings from rotating machines which are due for 
survey and they may be accepted on this basis without opening 
up if their condition is demonstrated to be healthy. 

Also, in certain instances, consideration may be given to 
deferring opening up of a major surveyable item if circum- 
stances warrant, taking account of design, appropriate 
indicating equipment (eg vibration sensors) and operational 
records. This provision has allowed the acceptance of a series 
of vibration readings from main propulsion turbines and alter- 
nator turbines to defer opening up for survey. In addition, the 
Periodical Survey Regulations contain formal requirements for 
screwshaft condition monitoring which enable surveys to be 
conducted without withdrawing shafts for examination. These 
requirements include, inter alia, periodic analyses of shaft bear- 
ing lubricating oil, bearing temperature monitoring and 
wear-down measurements. 

It would appear reasonable, when a satisfactory body of 
knowledge has been acquired, to extend the principle progres- 
sively to main diesel engines. This may become practicable first 
with crankshaft bearings and associated components. For 
pistons, cylinders, valves and related components, present 
wear rates require component replacements more often than 
the survey period of five years. So, whilst condition monitoring 
may assist in extending the intervals between overhauls of 
these components, they are exposed for inspection one or more 
times during each survey cycle. Therefore, the acceptance of 
condition monitoring information, as a basis for survey, need 
not be considered until technical improvements enable these 
components to run safely for more than five years without 
opening up. 


uo 


3. LR’‘S RESEARCH AND DEVELOPMENT 
ACTIVITIES 


The potential for condition monitoring technology in the 
marine industry has led Lloyd's Register to undertake a contin- 
uing research initiative whose present direction can be traced 
to the late 1970's. Figure 3.1 outlines these developments from 
which it can be seen that early work in the field was concerned 
with the influence of marine fuel combustion on engine wear 
and integrity. From this followed considerations of incorpo- 
rating various levels of embedded intelligence into condition 
monitoring systems, together with the advantages of various 
algorithmic approaches to the problem. Latterly, work has 
focused more on the value and techniques necessary to apply 
transient condition monitoring technology. Some of these 
research projects are now summarised. 


3.1 The Fuels Research Project (1980-1985) 


This research project [1] was a two phase programme which 
was initiated in 1980 and led by Lloyd's Register. The research 
programme had the active participation of some 20 major Euro- 
pean companies and funding from the EC under their 
Non-Nuclear Energy Programme. The Commission provided 
approximately 25 per cent of the project costs and the industrial 
participants included shipowners, engine manufacturers, oil 
companies and fuel treatment equipment manufacturers from 
the UK, Denmark, France, West Germany, Greece, Holland, 
Finland and Sweden. Support for the project was also received 
from the UK Science and Engineering Research Council. The 
project was designed to make a practical contribution to the 


Influence of fuel 
quality on wear 
and corrosion 


High temperature 
corrosion studies 


Diesel engine 
simulation 
development 


Other related machinery 
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reliability and efficiency of shipboard machinery. Although in 
its inception it was directed towards defining the effects that 
the then perceived deterioration in fuel quality would have on 
engine component integrity, it formed the start of LR’s present 
condition monitoring research programme. Furthermore, this 
work made a significant contribution to the development of 
the ISO marine fuels specification. 

Phase one of the project was concerned mainly with the 
categorisation of residual fuels and their combustion charac- 
teristics. Within the project a matrix of some 32 different fuels 
was considered. The composition of these fuels was based on 
the projection by oil companies of the fuels likely to be offered 
to the marine industry towards the end of the century. The fuels 
were specially blended by the participating oil companies: BP, 
Elf, Mobil, Shell and Total. These fuel blends were then tested 
on a Ruston 6APC research engine, located at the University 
of Newcastle-upon-Tyne and equipped with a heavy fuel oil 
injection system, to investigate their ignition and combustion 
characteristics. Two cylinders of the engine were extensively 
instrumented and a data acquisition system developed, capa- 
ble of storing 300,000 data samples over 80 consecutive cycles 
at 0.5 crank degree intervals. Following this, compatibility test- 
ing was undertaken on a wide range of production engines by 
the engine manufacturers: MAN-B&W, Ruston, SEMT Piel- 
stick and Wartsila. In addition to these trials further tests were 
carried out on the Atlas single cylinder research engine at 
Ricardo Consulting Engineers. These tests were aimed primar- 
ily at defining the effects of residual fuel combustion, by 
increasing operating parameters beyond the then limits. 

The properties of the first seven fuels tested in the programme 
indicated a considerable variation in the levels of asphaltenes, 
Conradson Carbon Residue (CCR), densities, viscosities and 
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Figure 3.1 
The development of Condition Monitoring Research and Development 
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Calculated Carbon Aromaticity Index (CCAI). The most signif- 
icant influence of residual fuel composition was found to be 
related to the ignition performance and, consequently, on 
recorded rates of pressure rise. Differences in fuel burning rates 
of the various fuels affect peak pressures, mean indicated pres- 
sures and metal temperatures as shown in Figure 3.2. 

The second phase of this research programme had two main 
objectives. The first was to develop an integrated diesel engine 
simulation capability, for predicting engine performance with 
variable quality fuels, by using expert systems, simulation 
models and optimisation techniques. The second was to use 
the engine simulator to design a fuel management system to 
optimise performance and reliability, in relation to specific fuel 
classes, by automatically controlling engine operating vari- 
ables such as injection flow rate and timing, charge air 
temperature, and turbocharger characteristics. 

The effect of lubricants on deposit formation attributed to 
specific grades of residual fuel oil and other aspects related to 
lubricating oil contamination or degradation, also formed a 
feature of the research programme. These problems were 
investigated at the Institut Francais du Pétrole. 

Recognising that the effects of fuel combustion on wear 
rates, and to a certain extent on combustion and corrosion, are 
related to the degree of fuel treatment, fuel treatment equip- 
ment was provided by several manufacturers. Trials with this 
equipment were undertaken at the University of Newcastle- 
upon-Tyne using an appropriate matrix of test fuels. 


3.2 The Condition, Performance Monitoring and Predictive 
Systems for Diesel Engines Programme (CPMPS) 
(1985-1990) 


In the early 1980's LR recognised that there would be a demand 
for condition monitoring and performance monitoring systems 
for diesel engines, capable of identifying, in a precise and reli- 
able manner, impending failure or the need for adjustment or 
maintenance. As a consequence, towards the end of the 
programme outlined in Section 3.1 above, LR in collaboration 
with the University of Newcastle-upon-Tyne, Hawker Siddeley 
Dynamics and the Humberside College of Higher Education 
submitted a proposal to the United Kingdom Department of 
Trade and Industry (DTI), to undertake a five year R&D 
programme to develop advanced computer based condition 
and performance monitoring systems with diagnostic and 
predictive capabilities for diesel engines. This programme was 
approved and formed a significant element in the UK Efficient 
Ship Programme. Part way through the project Hawker Sidde- 
ley Dynamics were replaced by Marconi Command and 
Control Systems as the industrial partner. 

The primary aims of this project were threefold. The first 
was to assess the feasibility of employing advanced computer 
technologies, including artificial intelligence techniques, to 
future condition and performance monitoring and diagnostic 
applications in marine diesel engines. The second was to iden- 
tify the scope, potential and limitations of such technology with 
respect to current and future developments. The third was to 
develop an experimental prototype advanced computer based 
diesel engine condition and performance monitoring system. 
This prototype was intended both to enable the industrial part- 
ner to develop a commercial range of products and also to allow 
LR to develop a basis, out of the knowledge and experience 
gained, for extending its classification procedures to embrace 
a wide range of advanced condition monitoring systems. 

Within the project, attention focused on sensors and algo- 
rithms for the prediction of faults. The work on sensors 
examined the accuracy, reliability and availability of typical 
instrumentation as well as the definition of the minimum 
sensor fit necessary to provide a data base from which faults 
could be detected. The minimum sensor fit considerations 
applied to both high and low speed data acquisition; in this 
context, for example, high speed data could relate to cylinder 
pressure and injector needle lift information, while low speed 
data could relate to jacket temperatures and engine tachometer 
readings. With regard to the algorithms used in the prototype 
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system, these had a structure that allowed a combinatorial 
propagation of the symptoms to identify faults. Two techniques 
were investigated to develop the fault identification rules: these 
were a Bottom-Up and a Top-Down approach. The latter was the 
more successful and was the eventual method used, involving 
the compilation of expert human knowledge about the identi- 
fiable symptoms of specific faults. 

The research project was based initially on two engine test 
programmes. The first, at the University of Newcastle-upon- 
Tyne, concentrated on the integrity of the cylinder, its running 
gear and other associated components. This provided a consid- 
erable amount of healthy engine and seeded fault related data 
which were used to develop the prototype system and have 
been used subsequently in other LR research programmes. The 
second measurement programme, conducted at the Humber- 
side College of Further Education, was concerned with the 
monitoring of crankshaft bearings and the engine lubrication 
system. In particular, this work evaluated the use of on-line oil 
debris monitors as well as the more traditional methods of peri- 
odic sampling. A subsequent extension of the overall project in 
1991, was aimed at validating the prototype diagnostic system, 
developed on the Newcastle engine, on a Paxman engine at the 
Royal Naval test establishment at Pyestock. The extension to 
the original work was funded jointly by the MOD and LR. 

The results of the prototype trials at Newcastle showed that 
most of the faults tested under steady state conditions were 
diagnosed successfully from the set of 15 conditions shown in 
Table 3.1. The overall diagnostic success rate was shown to be 
83%. The subsequent Pyestock trials, in which the original 
system was directly transferred to a different engine, gave a 
slightly inferior performance. This might be expected for a 
system tuned on another engine, but was nevertheless satisfac- 
tory from the research project point of view. The findings of this 
full five year research programme can be found in [2] and [3]. 


3.3 The Hot Corrosion Research Programme (1985-1987) 


Exhaust valve failure may result from a combination of causes. 
Of particular concern to diesel engine operators has been the 
interaction of sodium and vanadium oxides in the post- 
combustion products of marine residual fuels. These can affect 
adversely the corrosion resistance of engine materials working 
at elevated temperatures; much higher corrosion rates invari- 
ably are observed when salts derived from these oxides adhere 
and melt on hot engine components. 

As part of the fuels technology research 
co-ordination between Lloyd’s Register and 
various industrial institutions, the corrosion 
behaviour of diesel exhaust valve alloy spec- 
imens was studied in a dynamic burner rig 
at the National Physical Laboratory, 
England, [4]. Tests at temperatures of 600°C 
were carried out in conditions simulating 
vanadium in fuel levels of 50 and 100 ppm at 
3 sodium levels per fuel; namely 16, 33 and 
50 ppm. Since Stellites still hold a dominant 
position as a valve coating material, the results 
of Stellite 6 are shown in Table 3.2 by way of 
example. Electron probe micro-analysis 
undertaken on the corrosion products at the 
Cranfield Institute of Technology showed 
sodium sulphate to be the major constituent 
of the deposit with small amounts of an alloy 
matrix of sulphates also present. 

The corrosion morphology between rig 
specimens and diesel exhaust valves from 
marine engines was found also to be identical. 


The techniques of extreme value statistics were applied to 
@ the data summarised in Table 3.2 in order to estimate the maxi- 
mum likely corrosion rates. From this analysis extreme 
corrosion rates of 20.9 to 25.2 micron per 100 hours at 50 ppm 
vanadium and 41.5 to 52.5 micron per 100 hours at 100 ppm 
vanadium levels were predicted. Assuming linear corrosion 
attack kinetics, the estimated time for a 1mm gutter to form on 
the valve coating at an operating temperature of 600°C lies 
between 3,900 and 4,800 hours for a fuel vanadium concentra- 
tion of 50 ppm. This reduces to 1900 to 2400 hours if the 
vanadium level is increased to 100 ppm. These values compare 
with those obtained from a survey of 80 exhaust valves from 8 
large two-stroke engines over a 10 year continuous service 
period operating at valve seat temperatures between 520°C and 
560°C. The mean-time to burn for these valves varied between 
3600 and 8200 hours. 


Table 3.2 - Average Deposition Rates - Stellite 6 
Average desposition rate (gm/cm*/hr) 


50V-16Na 
50V-33Na 


50V-50Na 


100V-16Na 
100V-33Na 
100V-50Na 


3.4 Effectiveness of Lubricating Oil Analysis (1987-1990) 


In May 1987 a decision was taken to formulate a joint 
Mobil/Lloyd’s Register three year R&D project into the effec- 
tiveness of lubricating oil analysis. The prime objectives were: 


¢ to establish the reliability of current laboratory analysis 
techniques for used lubricating oils, 


. to assess the effectiveness of regular lubricating oil 
sampling and analysis in predicting the health of 
machinery, 


¢ to forma technically rational basis for including regular 
lubricating oil sampling and analysis as part of future 
3) time-based survey procedures. 


A preliminary study was carried out involving 110 ships lubri- 
cated by Mobil and classed by LR. Two particular areas were 
explored, white metal bearings and oil lubricated sterntubes. 
Sequential analysis results from the oil company were 
compared with LR’s machinery defect data base and the final 
results were sufficiently encouraging to proceed with the 
proposed in-depth three year project which commenced in 
September 1987. This scheme involved some 35 owners and 150 
ships and again relates the oil company’s sequential oil analysis 
results to the LR’s computerised machinery defect data base. 
The project [5] confirmed that traditional oil analysis proce- 
dures were still relevant in the assessment of lubricating oil 
condition but need to be supplemented by efficient wear metal 
and/or particle analysis, if machinery health or condition moni- 
toring is to be used to determine maintenance /survey practices. 


3.5 Advanced Algorithms Research Project (1991) 


Certain techniques, which may be grouped together under the 
title of advanced algorithms, were examined to see whether 
[2) any of them could be beneficial in the area of condition moni- 


toring. Of these, neural networks appear to be the most promis- 
ing and are described in Section 5 of the paper. For completeness 
the other techniques are now briefly described. 


Chaos Theory. 


This relatively new branch of mathematics is being applied to 
the study of non-linear dynamic behaviour and has been used 
successfully by University College, London, in research work 
into the stability of ships. It may well have a place in future 
condition monitoring systems, particularly in the area of 
marine engine transient responses, but the amount of research 
effort required to produce practicable techniques will be signif- 
icant. 


Genetic Algorithms. 


Using computer simulation of the natural evolutionary 
process, solutions to certain problems may be derived quickly. 
These start from a random selection of possible solutions and 
apply models of natural selection, mutation and reproduction, 
so that the ‘fittest’ (best) solution survives. The technique has 
been used in the detection of faulty diesel engine sensors, but 
little work has been done directly in the condition monitoring 
field. 


Qualitative Physics 


Qualitative physics, or causal based expert systems, make use 
of the knowledge of structures and causal models to solve prob- 
lems which cannot be addressed adequately by the rule based 
approach. The method has been adopted to produce a causal 
based diagnostic system for monitoring instrument readings 
and to diagnose the behaviour of a helicopter’s engine and 
power train. Details are given in [6]. 


3.6 Steady State Monitoring Research Programme 
(1991-1992) 


The effects of developing faults on main engine performance 

under steady state conditions were studied using the MERLIN 

diesel engine simulation capability, a general description of 

which is given in Appendix 1, and more fully discussed in [7]. 
Three specific faults were considered, namely: 


(i) Reduction in the fuelling rate for one cylinder. 
(ii) Blockage in the air filter. 


(iii) Hole in one exhaust valve. 


An increasing fault severity was simulated, ranging from the 
healthy condition up to the most severe state, in equal stages 
of fault development. 

For any combination of input values the simulation package 
returned a unique set of output values. Therefore, to get some 
idea of how selected parameter values would vary in practice 
a sample of pseudo random measurement errors was attached 
to each output of interest, assuming a Normal distribution of 
errors and a measure of variability estimated from tests using 
a similar engine. 

The main method of data analysis employed statistical 
discrimination, a brief outline of which is given in Appendix 2. 
The idea behind this approach is that, given sets of measure- 
ments, which are known to have come from one of two or more 
classes of data, we wish to set up rules so that we may allot a 
new observation to the correct class. In this case a class is 
defined by the different fault types under consideration. The 


Table 3.3 - Percentage Frequency of Correct Classification 


Main engine | Main engine fuel rate Reduced fuel rate severity 
speed rpm grms/cycie/cylinder 1 2 8 4 


vector of observations comprises the two exhaust plena, (Plen 2 
and Plen 3) temperatures and the turbocharger speeds. These 
particular parameter values were chosen after careful scrutiny 
of all those available; they responded well to changes in input 
and were consistent with the important underlying philosophy 
in this work, namely that of using parameters which could be 
measured by relatively cheap monitoring equipment, likely to 
be installed as standard on the majority of marine engines. 

The rules mentioned above are in the form of linear func- 
tions of the parameters of interest. Four classes of data have 
been defined, namely the healthy condition and the three fault 
types. Using the linear discriminant functions it is possible to 
define boundary planes which separate the different classes, so 
that, considering the boundary between class i and class j, then 
the boundary Wij is given by 


Wj = a(Plen. 2 Temp.) + b(Plen. 3 Temp.) + c(Turbo Speed) + d, 
where a, b, c, and d are constants. 


Table 3.3 shows the percentage frequency of correct classi- 
fication at each fault severity level for each combination of main 
engine load and speed, showing that over the whole engine 
map the success rate was generally 90% to 100% for the more 
severe fault levels. 

The MERLIN capability was used to simulate the effects of 
multiple faults on engine performance at the central point on 
the engine map; that is, 1200 rpm and a fuel rate of 0.37 
grams/cycle/cylinder. Figure 3.3 is a pictorial representation 
of the classification results, showing that when more than one 
fault is present it becomes difficult to separate the effects. For 
instance, the combination of severe air filter blockage and fuel 
reduction masks the presence of a large hole in the exhaust 
valve. In fact, this latter fault becomes increasingly more diffi- 
cult to spot, even at high severity levels, when one or both of 
the other two faults are present. Blockage in the air filter has a 
particularly strong swamping effect. Also noticeable is the way 
in which reduced fuel rate and an exhaust valve hole tend to 
compensate one another in their effect, resulting in an appar- 
ently healthy engine condition. 


3.7 Transient Monitoring Research Programme (1992-1994) 


An investigation into the monitoring of diesel engine transients 
was conducted to determine whether symptoms of engine 
faults would be more apparent than was found during steady 
state conditions. If this were to be shown, then the possibility 
of detecting faults at an earlier stage in their development 
would follow. 

The MERLIN computer simulation capability was used again 
to model a main engine and to simulate results under different 
loads and speeds. As before, a statistical discrimination approach 
was adopted to distinguish between healthy and faulty states. 
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Blocked air filter severity Hole in exhaust valve severity 
1 2 3 1 2 3 a 


60 100 100 
80 100 100 
70 100 100 
50 100 100 
70 90 100 
70 100 100 

100 100 
90 90 90 
40 100 100 


The MERLIN computer simulation provided a_ practically 
unlimited choice of engine parameters for diagnostic purposes. 
However, in line with a pragmatic philosophy of economy in 
sensor usage the following parameters were chosen for possible 
use as fault indicators: 


(i) | Plenum 1 Temperature (Boost). 

Plenum 2 Temperature (Exhaust). 
Exhaust Temperatures for Cylinders 1-6. 
Turboblower Speed. 


Brake Power. 


The six cylinder exhaust temperatures were not used individ- 
ually, but the temperature range proved to be a valuable 
statistic, as this was very sensitive to changing fault conditions. 

As a first step, simulated data were obtained under steady 
state conditions by varying the fuelling from 0.23 to 0.35 
gms/cycle/cylinder by 6 equal steps, for 4 engine speeds of 
1200, 1400, 1600 and 1800 RPM. These data provided the input 
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Figure 3.3 
Classification Probability for 1200 rpm and 
0.37 gms/cycle/cylinder Fuel Rate 


Table 3.4 - Percentage of successful Diagnoses 


Hole in exhaust 


% 


Number 


% 


success 


Number 
of tests of test 
100.0 
100.0 


91.7 


Steady state 
Load change 
Speed change 


for the discriminant analysis which formed the basis of the fault 
detection procedure described. 

The 24 operating points above were repeated 4 times, all 
under steady state conditions, with the following simulated 
faults: 


(i) Healthy (no fault). 

(ii) Hole in exhaust valve, cylinder 1 (effective flow area: 
35 sq.mm). 

(iii) Blocked injector, cylinder 1 (fuel rate reduced by 
0.03 gms/cycle/cylinder). 

(iv) Faults (ii) and (iii) together. 


Conditions (i), (ii) and (iii) were repeated under two types of 
transient, changing load, and changing engine speed; for this 
latter transient two levels of severity were simulated, fuel 
reductions of 0.03, gms/cycle and 0.06 gms/cycle for cylinder 1. 

An efficient discrimination model was achieved with 2 
parameters, the range of cylinder exhaust temperatures and the 
turboblower speed. 

Having established the zonal boundaries from the steady 
state data, Figure 3.4, the engine behaviour under transient 
conditions was simulated using the MERLIN package. 
Figures 3.5 and 3.6 show the relationship between turboblower 
speed and the range of exhaust temperatures over a few 
seconds during a change of load from about 130 kW to roughly 
430 kW, and a change of engine speed from about 1000 RPM to 
approximately 1700 RPM. 

Table 3.4 shows the number of tests and the percentage 
success obtained in reaching a correct diagnosis using the 
discrimination functions calculated from the steady state simu- 
lation. Each result which fell into the right zone was allotted 
one point; a result which fell into the ‘mixed’ zone, when only 
a single fault had been simulated, was awarded half a point. 

Using the steady state simulation results, the plot of cylinder 
exhaust temperature range against turboblower speed, 
Figure 3. 4, illustrates clearly the difference between the healthy 
and faulty conditions. The degree of separation is sufficient to 
isolate the individual types of fault. 

Clarity of separation is not evident during transient condi- 
tions using the discrimination approach. For both types of 
transient, when a hole in the exhaust is simulated, most of the 
time trace results stay within the correct zone. However, for the 
speed change, both healthy and blocked injector (lower sever- 
ity) traces stray into the hole-in-exhaust zone for a brief period. 
Only for the higher severity level of blockage is the time trace 
indicative of the correct fault condition, Figure 3.5. For the 
simulated load change it would be difficult to distinguish 
between the healthy and blocked injector condition, Figure 3.6. 

Overall, it seems that information gained during steady 
state operation leads to unambiguous conclusions about engine 
condition. For the two fault types investigated it is difficult to 
see that data obtained during a transient add anything useful 
in diagnostic terms, bearing in mind that over the few seconds 
of transient operation the response times of the measuring 
equipment, particularly in the case of thermocouples, become 
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Figure 3.4 Fault Discrimination — Steady State 
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Figure 3.5 Fault Discrimination — Load Transient 
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Figure 3.6 Fault Discrimination — Speed Transient 
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a practical limitation on the recording accuracy necessary to 
detect the changes found during simulation. Simulation of 
other fault types is necessary to demonstrate the possible effec- 
tiveness of monitoring during transients. 

A diesel engine, whose performance characteristics were 
simulated by the MERLIN capability, was run under test bed 
conditions at the RAE, Pyestock, and seeded with a range of 
severity for the fault types listed above. The results were in 
general agreement with the simulation outputs and confirmed 
that successful fault detection was not enhanced by monitoring 
under transient conditions. Only at high speed and/or load 
was detection a practical possibility and even then the results 
during steady state operation tended to give a higher degree 
of separation among the parameters of interest. 

In contrast, a successful example of transient monitoring is 
given by [8] using data on gas turbine start temperatures. The 
ten standard turbine combustion can temperatures, measured 
after the first turbine stage, were fed into a double neural 
network system; the first designed and trained to detect when 
a fault occurs, the second diagnosing the fault. The output is 
displayed in a form designed to help a watchkeeper to monitor 
the start. First, a graph of the minimum, maximum and average 
outlet temperature for each combustion can over time is 
provided. This is followed by a circular display of the ten can 
temperatures compared with a reference, the average can 
temperature. Figures 3.7 and 3.8 illustrate a healthy engine start 
and a serious fault respectively. 


Start Status 


Engine Now: 
Can Temps. within limits. 


Figure 3.7 A Healthy Engine Start 


3.8 Crankshaft Signal Monitoring (1991-1993) 


LR conducted some early research into the use of the torsional 
strain signature of a crankshaft for monitoring the combustion 
processes in a diesel engine. The technique showed some 
promise but suffered from signal to noise ratio problems when 
the number of cylinders increased beyond four to six. 

More recently, significant effort has been expended in exam- 
ining the variations in instantaneous speeds of diesel engine 
crankshafts, as a means of monitoring engine condition. Atten- 
tion has been directed initially towards the extraction of 
individual cylinder combustion information and the detection 
of uneven power distribution between cylinders, in engines 
running at normal speeds and powers. The research has shown 
promising possibilities for cylinder numbers up to six, while 
others have shown successful discrimination of faults in trials 
with larger numbers of cylinders [9]. 

LR’s research also examined a six cylinder engine undergo- 
ing a start sequence. In this trial the effect of a leaking exhaust 
valve of one cylinder showed as an uneven pattern of variation 
of crankshaft speed, measured over the two complete 
crankshaft revolutions needed to include every compression 
stroke. The possibility of applying the technique for detecting 
and possibly diagnosing individual cylinder compression defi- 
ciencies can be foreseen. 

Although the ability to discern the events occurring in indi- 
vidual cylinders becomes more difficult in engines with 
cylinder numbers greater than six, and the generation of signal 
noise adds to the difficulties, the techniques described above 
have the potential for advancing the condition monitoring of 
internal combustion engines and other reciprocating machines. 
However, it would appear that the development of practical 
applications must await the application of further research 
effort. 
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Figure 3.8 A Serious Fault Detected 


4. CONDITION MONITORING TECHNIQUES 


A condition monitoring parameter is a physical quantity which 
can be measured and used to determine the condition of a 
system. In any system the identification of faults is usually 
related to physical and/or chemical changes within the system 
itself. Therefore, if these changes can be monitored it may be 
possible to identify faults and take the necessary corrective 
action. A list of some of the condition monitoring techniques 
available is given in Appendix 3. The list is not exhaustive but 
does give an indication of the wide variety of techniques which 
can be employed. Appendix 4 gives examples of the combina- 
tions of techniques which can be used for monitoring particular 
items of machinery. 

Vibration analysis is the most common technique applied 
to marine machinery and is a well proven method for gaining 
information about the condition of a rotating machine. This 
technique and other commonly used techniques, such as lubri- 
cant monitoring, performance monitoring, acoustic emission 
monitoring and cylinder pressure analysis are discussed in 
some detail in the following sub-sections. 


4.1 Vibration Monitoring 


Mechanical vibrations and shocks result from dynamic forces 
which set up a series of motions within the system. These forced 
motions may be linear, torsional, or a combination of both and 
the energy in the vibratory motions is normally distributed over 
a range of frequencies. 

Machinery vibrations can be measured and analysed to 
provide a non-invasive method of diagnosing the possible pres- 
ence of an incipient or developed fault. Signals from vibration 
sensors are measured and then compared with reference 
measurements in order that they may be interpreted; this 
involves some analysis of the signals, ranging from simple 
amplitude measurements to spectral analysis of the vibration 
signature. 

The simplest and most commonly used vibration monitor- 
ing technique is overall vibration level monitoring. This 
expresses the broad band level of vibration at the measuring 
point, irrespective of the complexity of the wave form being 
measured. These values can be checked against pre-set limits 
and trends monitored. Overall vibration level monitoring has 
the advantage that the equipment needed is relatively inexpen- 
sive and does not need skilled personnel to use it. However, 
fault diagnosis can be very difficult; although the overall level 
can give a good indication of the existence of a fault, the impor- 
tant information contained within the measured frequency 
spectrum, necessary to identify the specific fault, is not avail- 
able. 

More diagnostic information can be obtained by analysing 
the vibration signal using spectral analysis as discussed in 
Section 5. The nature of the defect is identified by resolving the 
vibration signal into its constituent frequencies and relating 
these to the known discrete frequencies associated with the 
component. Changes in the vibration level of these discrete 
frequencies indicate changes in condition of the relevant 
component. For example, rotating component imbalance 
causes an increase in vibration at a frequency corresponding to 
rotational speed, first order, and misalignment between rotat- 
ing components affects frequencies at twice the shaft speed, 
second order. 

Vibration monitoring techniques are particularly suitable 
for monitoring rotary machines such as turbines, fans, rotary 
compressors, pumps, electric motors, and alternators. The tech- 
niques are also suitable for detecting the deterioration of rolling 
element bearings which produce characteristic high frequency 
vibration when wear is present or damage occurs. In these cases 


a defect energy concept is used as the significant condition 
monitoring criterion. Vibration monitoring is not generally 
suitable for diagnosing faults in reciprocating machinery 
because the impulsive nature of the combustion process and 
the machine geometry give rise to complex random waveforms. 
However, monitoring the overall level of vibration of such 
machinery can provide a useful indication of whether it is 
healthy or not. 


4.2 Lubricant Monitoring 


A sample of used oil may be shown to comprise three compo- 
nents; the base oil, the lubricant additives and _ the 
contaminants. The contaminants, in the form of solids, liquids 
or even dissolved gases, originate from components ina system 
lubricated by, or exposed to the oil. They therefore provide a 
good indication of any deterioration of a component in the 
system. 

There are various methods of monitoring solid contami- 
nants in the form of wear debris. Of particular interest are 
spectrographic oil analysis and ferrography. 

Spectrographic Oil Analysis: This technique allows identifica- 
tion of the element concentration in an oil sample, for example 
copper, tin, iron and sodium levels, and is the most extensive, 
commonly employed form of analysis. Ferrous, non-ferrous 
and non-metallic debris can all be detected. In combination 
with an engineering based analysis of the element concentra- 
tion data, the specific components responsible for the wear 
particles can be identified and remedial measures quickly and 
efficiently carried out. 

Ferrography: This analysis technique is employed exten- 
sively as a means of forecasting component failures in many 
mechanical systems; for example, gas turbines, gearboxes, 
transmissions, hydraulic systems and high speed diesel 
engines. It can be used in either the ‘direct reading’ mode where 
the possible onset of machinery failure is monitored, or the 
‘diagnosis’ mode where the individual wear particles are iden- 
tified through consideration of their morphology. In the direct 
reading mode, if both the concentration of wear debris in an oil 
sample and the relative density of large to small particles signif- 
icantly increase, incipient machinery failure is possible. In this 
case the ‘diagnosis’ mode is employed. In this mode, individual 
wear particles are isolated so that they can be examined using 
a microscope for their shape, size and surface characteristics. 
This enables the wear mechanism to be identified, for example 
fatigue, corrosion, cavitation, fretting or scuffing. 

The traditional role of lubricating oil condition monitoring 
has been to set an alarm contamination level that, when 
exceeded, results in a unit being taken out of service and over- 
hauled before catastrophic failure occurs. The emphasis today 
however, has shifted to benign wear mode assessment where 
the level of contaminant is monitored and the number of wear 
particles counted to see whether it has risen significantly. 
Prompt corrective action can then be instigated. The techniques 
can be divided into three general methods; in-line monitoring, 
off-line monitoring, and on-line monitoring. 

In-line monitoring sensors examine all the system oil that 
passes through the machine circuit at the point of monitoring 
and thus have the advantage that potentially they analyse all 
the oil with no external influences involved. In practice, 
however, the flow is often required to be constricted, and only 
the flow local to the transducer is sampled. Results from nomi- 
nally identical flows therefore often vary between different 
transducers. Furthermore, when relying on this technique, 
great care needs to be exercised in the siting of these transducers 
in the system. 

Off-line monitoring involves taking periodic samples of 
the fluid for analysis, usually off-site at a laboratory with dedi- 


cated instrumentation. Provided great care is taken when 
obtaining a sample, good quality accurate results are 
obtained. There can be a significant advantage in condition 
monitoring terms by combining this off-line monitoring tech- 
nique with trending procedures. 

On-line monitoring sensors are a compromise between in- 
line and off-line methods. The transducer is attached to the 
system, often with the system running, and measurements 
can be taken immediately. For this type of sensor it is obvi- 
ously important that the sample point is representative. This 
technique has the advantage that a single transducer can be 
used for a number of measurement points or items of machin- 
ery. 

Lubricant monitoring has been employed by the rail, road 
and air transport industries for many years as a basis for over- 
haul and replacement of machinery. Its use for marine 
machinery is growing; for instance LR have introduced lubri- 
cant trend analysis as a significant factor in the granting of 
extension of tailshaft surveys. It is also suitable for condition 
assessment of reciprocating machinery and is important in a 
supporting role for rotating machinery. 


4.3 Performance Monitoring - Steady State 


The most widely used form of performance monitoring 
involves the measurement of machine or system performance 
parameters during steady operating conditions. Care is neces- 
sary to ensure that the system has actually reached a steady 
condition; there can often be a significant period between the 
completion of a transient excursion and the achievement of a 
steady state. However, there is usually at least one sensitive 
parameter which can be monitored to ensure that steady state 
has been achieved. 

‘Healthy’ condition records, taken after commissioning 
and after each significant overhaul, form the basis for the eval- 
uation of periodically measured parameters, and allow rates 
of change of performance and trends to be revealed. The 
correct evaluation of these factors requires the operating 
conditions to be the same as those which applied when the 
healthy machine parameters were recorded. This may be diffi- 
cult to achieve as external variables such as ambient 
conditions and fuel quality can have a significant effect. In 
these cases, the recorded parameters must be corrected to 
allow true comparison with the healthy condition parameters. 
Even when this is done successfully, the difficulties of relating 
changes in observed parameter values to changes in compo- 
nent condition remain. Research to develop methods of 
overcoming these difficulties continues. 


4.4 Performance Monitoring — Transient 


There are many cases where the most sensitive monitoring of 
the steady state of a machine or system can fail to detect the 
presence of a fault or problem. In some specific cases it has 
been found that changes in parameters which occur during 
load or speed transients can provide indicators which allow 
detection and aid identification of the fault or problem. The 
technique relies on the fact that transient operation is usually 
more onerous than steady state operation. Consequently 
faults exert a greater influence on the measurable parameter 
values, and differences from normal tend to be amplified. A 
familiar example may be experienced when driving a car 
which cruises smoothly, but which misfires whenever accel- 
eration is attempted. 

Notwithstanding the reservations expressed in Section 3.7, 
transient performance monitoring is best suited to machinery 
where transient operation occurs regularly. 
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Figure 4.1 
Cylinder Pressure Readings frome Flame Face Transducer 
Compared with those from Load Cell Direct 
and as Modified by Neural Network 


4.5 Acoustic Emissions Monitoring 


Humans have the ability to learn the sound of a healthy machine 
or system, to recognise any changes from the expected sound 
over and above any background noise from other machines and, 
with enough experience, diagnose faults. As this technique has 
proved so useful, means of automating it have been developed. 

The term ‘acoustic emission’ covers sound and vibration 
from approximately 10kKHz to 1MHz, but the full range of 
frequencies are not uniformly useful. For example, low 
frequency noise and acceleration measurement signals are little 
attenuated by structures, fluids or air and can combine to form 
complex, confused patterns which are difficult to analyse. By 
working at relatively high frequencies, where the signals are 
attenuated by surrounding media and background noise is 
reduced, the technique offers a better signal to noise ratio than 
vibration signature analysis. Consequently, it is capable of 
detecting smaller deviations from normal patterns and so 
provides much earlier indications of deterioration. 

Pumps are an application suitable for acoustic emissions 
monitoring, where detection of the onset of cavitation and a 
subsequent measure of cavitation severity is required. The tech- 
nique is also used for detecting the sounds of crack propagation 
in structures by monitoring high frequency transient elastic 
shock waves released by high velocity fracture events, in partic- 
ular micro-displacements. As fractures progress and stress 
intensity increases, the acoustic emissions also increase and this 
characteristic can assist diagnosis in appropriate cases. 


4.6 Cylinder Pressure Analysis 


The cylinder pressure diagram is widely recognised as one of 
the most informative sources of information for diesel engine 
health and performance monitoring purposes. The correct 
interpretation of cylinder pressure information can reveal vari- 
ous faults which affect combustion, ranging from inefficient 
piston ring and/or valve sealing, to fuel injection and combus- 
tion timing faults. The conventional practice of obtaining this 
information periodically would be improved by continuous 
monitoring which should enable earlier detection of the faults 
mentioned. Unfortunately, direct measuring pressure trans- 
ducers, exposed to the high cyclic pressures and temperatures 
of the combustion process, have a short life and tend to require 
frequent re-calibration. Therefore, techniques to infer cylinder 
pressure information, or monitor individual cylinder power 
contributions external to the combustic chamber, have been 
investigated. 

One method utilises a piezo electric load washer mounted 
ona lengthened cylinder head stud between the cylinder head 
and the nut. The principle of operation is that the cylinder firing 
load is added to the pre-load applied to the nut and hence to 
the load washer. The resulting signal from the load washer can 
then be processed to give an equivalent cylinder pressure. 

Load washers have been tested for short periods and have 
produced signal traces which are recognisable as cylinder pres- 
sure diagrams. It is anticipated that with suitable signal 
conditioning, it will become possible to construct accurate pres- 
sure diagrams from the load cell signals. Figure 4.1(a) compares 
the signals obtained froma flame face pressure transducer with 
those froma load cell washer measured simultaneously against 
crank angle. As can be seen, the inferred cylinder pressure 
signal exhibits a high accuracy during the closed cycle period 
(load cell under compression) with sufficient detail to allow the 
calculation of the ignition delay period and other routine cylin- 
der performance calculations. The signal developed by the load 
cell can be smoothed in order to counteract the influence of the 
other cylinders by the use of neural networks; such a case is 
shown in Figure 4.1(b). 
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5. ANALYTICAL METHODS 


The analysis of time dependent periodic signals — whether these 
be of vibration, pressure, displacement or other physical prop- 
erties — is a subject area where much research is currently being 
undertaken. In essence, the subject divides itself into the anal- 
ysis of steady and transient signals. In the former, the 
techniques of Fourier analysis generally apply whereas the 
latter embrace consideration of short time Fourier Transform 
and wavelet methods. 

In steady state analysis, modern analysers enable a variety 
of parameters to be derived from an input signal. As well as 
the raw data signal and its harmonic components, time aver- 
aged peak, root mean square (RMS) and other values are 
normally available. It is important to understand clearly the 
difference between these different parameters if mis-interpre- 
tation of the data is not to occur. Figure 5.1 outlines some 
common parameters describing a typical time trace. In such 
cases a relationship of the form: 


Maximum Value = V2x Time averaged RMS Value x Crest factor 


Encountered ; 
= Time averaged peak value x Crest factor 


can be used to convert from one value to another. 

In many cases a frequency analysis of a signal is converted 
into an order analysis. When this occurs the order of the compo- 
nent is defined by: 

Actual Frequency of Component 


Reference Frequency of Component 


Order = 


In the majority of instances of interest to condition monitoring, 
the reference frequency is taken as the shaft speed. 
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Figure 5.1 
Relationship of Various Amplitude Measures 


In many cases the most convenient way of representing the 
components of a Fourier analysis is by means of a spectrum. In 
this the harmonic component amplitudes are plotted on a base 
of frequency and this facilitates the interpretation of their rela- 
tive importance. Figure 6.5, later in the paper, shows a typical 
example of a spectral analysis in connection with the use of 
LR’s condition monitoring system. 


5.1 The Fast Fourier Transform (FFT) 


The mathematical theorem first proposed by Fourier essen- 
tially states that any continuous periodic curve may be looked 
upon as a combination of several pure sinusoidal curves. This 
holds good no matter how complex the signal may be. 
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Following from this theorem a periodic function of time x(t), 
having a period T, can always be expressed as the sum of an 
infinite trigonometric series as follows: 


x() =aot+ s lay cos (22) + by sin (2) 
k=1 


in which the Fourier coefficients a, and b, are constant valued 
functions given by: 


se 
i] tA. Geng ( atte a pti 
aah! x (1) cos( T )at REO 32%. nek 


and 
yy 
= ; sy ( 2tkt Ap sh 
nat} x (1) sin| - Jat k=1,2,3... etc 


Before the widespread use of computer based methods for the 
decomposition of a vibration signal, analysis was largely 
undertaken by manual methods. Frequently, this process 
involved many hours of studying ink-pen or ultra-violet 
recordings of vibration and other signals. Experienced analysts, 
however, could identify the spectral components of a signal by 
‘eye’ and subsequently confirm their visual identification by 
analysis using the methods outlined in this section: indeed this 
capability is still required by LR’s field investigation staff. 

To demonstrate spectral decomposition, Figure 5.2 outlines 
the process for a three component signal which comprises a 
first, second and third harmonic. In this example, the ratio of 
the three frequencies constituting the signal (f,,/f,-;) is clearly 
well in excess of unity in each case. If, however, the frequency 
ratio is close to unity then the phenomenon of beating occurs 
as shown in Figure 5.3 for a two component signal having indi- 
vidual amplitudes of a and b. In this case the resultant wave 
has the same apparent frequency as the component with the 
greater amplitude and its amplitude varies between the sum 
and difference of the component amplitudes, the beat 
frequency being the difference between the frequencies of the 
components. 


1st harmonic 


a 


2nd harmonic 


Signal 


+ 


3rd harmonic 


Figure 5.2 
Illustration of how a Waveform can be broken down 
into its Component Frequencies 


Computer based methods now allow the use of Fourier 
Transform methods to analyse steady signals. In a typical 
measurement scenario the transducer signal will be fed 
through an analogue-to-digital converter. As such, the contin- 
uous time series representing the transducer signature is 
sampled at a constant interval A from which a set of discrete 
values of the signal x(t) are accumulated at times t = rA, where 
r=...,-1,0,1,2,3... as shown in Figure 5.4. 

The classical method of estimating the spectral content of 
the measured data was to derive the appropriate correlation 
function and then to apply the Fourier Transform to this func- 
tion to obtain the required spectrum. In the mid-1960’s work 
by Cooley, Turkey and Sande stimulated the application of the 
Fast Fourier Transform technique to time series analysis. The 
progressive development of this technique has now led to the 
situation where it is faster and more accurate to calculate the 
spectral estimates directly from the descritized time series. 

By using complex notation to combine the Fourier coeffi- 
cients a, and b, above, it is possible to define a single 
equation. 


Xk =k ~ iby 


and by writing 


gaa cos (27K) - isin Feat 


we have 
a 
Xi a i | x (D.e" (2nkt/T ) dt for k>0 
0 


By approximating the area under the function x(t) by the sum 
of the areas contained in each of the elemental rectangles, 
Figure 5.4, the integral above can be replaced by the summa- 
tion: 


N-1 
Xe ly s x,.e71 Onk/T ra) 


r=0 


and if the substitution T=NA is made then 


N-1 
Xr=L ¥ xe! QM (= 0, 1,2... (N-1) 
N ,20 


This relationship provides sufficient information to allow all of 
the discrete values of the time series x(t) given by {x,} to be 
regained exactly. The range of the Fourier components 
X, (=a, - iby) is limited to k=0 to (N-1) which correspond to 
harmonics of frequency @, = 2nk/T. 
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Figure 5.3 The Beat Phenomenon 
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Figure 5.4 
Sampling of a Signal at Regular Time Intervals 


The inverse of the relationship for X; which enables the compu- 
tation of a typical value x, of the series {x,} is given by: 


N-1 
xX, = >i X,e7! 2mr/N) 


k=0 


T= 0) 1522..0N - 


When conducting an analysis, an estimate must be made of 
the frequency range of interest and the maximum frequency of 
the significant spectral components in the signal to be analysed. 
Having done this, an appropriate sampling interval A(s) must 
then be determined. This requires that the Nyquist frequency, 
given by 1/(2A), exceeds the maximum frequency present (fmax) 
in the signal: 
ie. 


fmax < i a firny 


This condition is introduced to prevent a distortion of the X, 
versus @, relationship, termed aliasing. This is particularly 
important when analysing measurement data based on equally 
spaced samples. In some extreme cases, it may be necessary to 
filter the data to remove all frequencies greater than the Nyquist 
frequency fyy. As a practical guide to the inequality quoted 
above, the ratio fx /fmax Should be greater than two. 

Essentially the preceding analysis relates to steady signals. 
In order to analyse transient signals two further processes are 
worthy of outline consideration. These are the short time 
Fourier Transform (STFT) and the Wigner-Ville method. In the 
case of the short time Fourier Transform method the spectral 
coefficients of the signal are computed for a short length of data 
trace and then the procedure is repeated successively at differ- 
ent short sections of data. The problem with this approach, 
however, is that high resolution cannot be obtained simultane- 
ously in both the time and frequency domain in that the 
requirement of a short data window and a narrow bandwidth 
are irreconcilable. 

The second technique was first explored by Wigner in the 
field of quantum mechanics and subsequently applied to vibra- 
tion mechanics by Ville; hence the Wigner-Ville method. The 
basis of the method is the averaged instantaneous correlation 
function ata particular time t of a collection of records, given by: 


Ra( ait) =E)x(t-) x(1+ 8) 
2 2 


where At is the time interval. 
The Fourier Transform of this correlation function is, there- 
fore, 


Su(a@,t ) = al | Raf Att ) etotd ( At ) 
2m |. 
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Figure 5.5 
Cepstrum Analysis of a Gearbox in a Poor Condition 
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In this equation S,. (@,t) is a measure of the frequency content 
of the transient signal at the time t, however, it is difficult to 
compute R,, (At, t) because of the non-availability of the data. 
To overcome this difficulty use is made of the Wigner distribu- 
tion 0,,(@,t) given by 


Dx (Ot ) “2 x(-3)o+9) e!?td( At) 


This function, therefore, applies to a single record of data rather 
that the collection of data samples initially discussed. Clearly, 
though, this expression is not without its problems due to the 
infinite nature of the integral and the implied dependence of x 
far away from the local time t. For these reasons other methods 
of analysing non-steady signals are currently the subject of 
research; one such example is wavelet analysis which is outlined 
later in the paper. 


5.2 Cepstrum Analysis 


The term cepstrum is an anagram of the word spectrum. Simi- 
larly, other terms associated with this form of analysis are 
derived from the more commonly used terms of harmonic anal- 
ysis; quefrency, saphe and rahmonics are obvious examples. 

Cepstrum analysis was originally defined as the power spec- 
trum of the logarithmic power spectrum by Bogert, Healy and 
Tukey in 1963. Its purpose was to assist in the analysis of seismic 
signals by giving information about echoes which would help 
in determining the location of the hypocentre of a seismic event. 
Subsequent to this original definition several variants of the 
definition were proposed. For the purposes of machinery condi- 
tion monitoring the power cepstrum can be expressed as a 
frequency analysis of a frequency analysis. 

Applications of cepstrum analysis to machinery condition 
monitoring are generally based on its ability to analyse period- 
icity in a measured spectrum as families of harmonics and 


uniformly spaced sidebands, derived from the machine while 
being insensitive to the transmission path of the signal from an 
internal source to the external measurement point. For example, 
it would be expected that cepstra of vibration measurements 
taken on two different bearings of a gearbox would be similar. 

Sapy [10] considered the application of cepstrum analysis to 
the detection of missing blades in turbines and showed that the 
technique had certain advantages, principally by collapsing a 
family of harmonics measured on the casing into a single 
component. Similar reasoning is applicable to gearbox analysis 
since any deviations from exact uniformity in tooth-meshing 
will tend to reveal themselves partly as harmonics of the shaft 
speed and partly as sidebands around the tooth-meshing 
harmonics, caused by modulation of the tooth-mesh signal at 
lower rotational frequencies. In this context the cepstrum has 
the advantage of being able to detect periodicity and to measure 
it accurately because it gives the average sideband spacing over 
the entire spectrum. Figure 5.5 demonstrates the use of cepstrum 
analysis of the vibrations of a gearbox in poor condition. From 
this figure it can be seen that the cepstrum analysis identifies 
two families of harmonics or sidebands at 49.8Hz and 120.7Hz 
which otherwise would not be apparent from a conventional 
spectral analysis. 


5.3 Wavelet Analysis 


Fourier analysis, due to the nature of its definition, tends to aver- 
age a signal over a chosen duration. This tendency which 
represents a disadvantage when the analysis of transient signals 
is attempted can be partly overcome by the use of wavelet anal- 
ysis. This form of analysis, as with cepstrum analysis, had its 
origins in seismic analysis, particularly in connection with the 
study of earthquake records. 

The analysis technique depends on constructing the 
measured signal from a set of analysing wavelet forms which 
are generated from dilation equations. The general form of these 
equations is: 


(x) = Co O(2x) +c) (2x -1) + C2 (2x -2) + C3 O(2% -3) + 


It can be shown that the even number N of wavelet coeffi- 
cients c,, which define the scaling function o(x) and the 
corresponding wavelet, W(x), by, 


Wx) = 5 (-1)qo(2x +k - N +1), 
k=0 


must satisfy the following conditions: 


i) Uniqueness and Unit Area 


ii) Accuracy 


=0 form =0,1,2...,(N/2-1) 


N -1 
Y 61)'k"c, 


k=0 


iii) Orthogonality of the wavelet system 


oksm=O0 m#0 and m=1,2...,(N/2-1) 


with the additional condition 


p> =z 


Table 5.1 - Wavelet Coefficients 
Haar wavelet D4 wavelet 


1 Co=(1+V3)/4 


D6 wavelet 
Co=(1+V104+V(5+2V 10))/16 
C1=(5+V10+3V(5+2V10))/16 
Co=(5-V10+V(5+2V 10))/8 
Ca=(5-V10-V(5+2V10))/8 
C4=(5+V 10-3V(5+2V10))/16 
C5=(1+V10-V(5+2V10))/16 


C;=1 Cy=(3+V3)/4 


Co=(3-V3)/4 
Ca=(1-V3)/4 


Various even numbered wavelet formulations have been devel- 
oped, however, if more than six wavelet coefficients are 
contemplated then a numerical solution rather than a classical 
one has to be employed . Table 5.1 shows those derived by Haar, 
Daubechies (the D4 wavelets) and those for the D6 wavelets. 
Asan example of the use of wavelet analysis, Figure 5.6 shows 
the analysis of a square wave into its D4 wavelet components 
while Figure 5.7 shows the analysis of a transient signal into a 


100 


Note : The similarity of approach with 
Figure 5.2 which shows a Fourier 
analysis 


frequency time region using wavelet analysis. In this latter 
Figure the time waveform is shown above the wavelet analysis. 

In terms of vibration analysis, wavelet based techniques are 
comparatively new; a good introduction to the subject can be 
obtained from [11]. As a consequence much research work is 
required to determine the best choice of wavelet fora particular 
application, how to interpret the wavelet maps and other 
related questions. In the specific case of condition monitoring 
the wavelet technique, based on families of orthogonal 
wavelets, will need to show a distinct advantage over the short- 
time Fourier Transform and Wigner-Ville distribution 
time-frequency methods. Orthogonal wavelets permit fast 
computational algorithms with no redundancy of information: 
N data points give N wavelet amplitudes. This is in contrast to 
the short-time Fourier Transform and Wigner-Ville methods 
where redundancy of information and longer computation 
times are featured. Notwithstanding these considerations, the 
latter methods can provide better information on the harmonic 
content of a signal in some cases. 
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Figure 5.6 
Analysis of a Square Wave into its D4 Wavelet Components 
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Figure 5.7 Wavelet analysis of a Transient Signal 
Photo courtesy of LMS International 


5.4 Artificial Intelligence Methods 


An expert system is essentially a computer program designed 
to simulate the expertise of a human specialist, and its primary 
components are a knowledge base and an inference mecha- 
nism. The system knowledge comprises both a factual and 
heuristic component. Factual knowledge is information which 
is known to experts ina prescribed field and is considered exact. 
Heuristic knowledge, however, is considered inexact; it 
comprises private, even unconscious, rules of thumb that char- 
acterise the expert decision-making process within a particlar 
field. 

There are three principal divisions of artificial intelligence: 
fundamental research, applied research and cognitive science, 
as seen in Figure 5.8. The first is directed toward the develop- 
ment of new techniques for applying artificial intelligence. The 
second type is directed towards the development of programs 
which have some specific applied purpose, usually in the 
industrial, scientific and administration sectors. One of the 
main divisions of this activity is the expert or knowledge-based 
system which addresses or “knows” about some particular 
subject and can “reason” about that subject at an expert level. 
The third type of activity is directed towards understanding 
the way that human beings use knowledge. 


The aspect of artificial intelligence which has the most rele- 
vance to condition monitoring is that related to the expert 
system, although aspects of cognitive science are relevant. By 
the mid 1970's several expert systems had begun to emerge. A 
few investigators who recognised the central role of knowledge 
in these systems initiated efforts to develop comprehensive 
knowledge representation theories and ideas of heuristic 
search then became prominent. Problem solving was viewed 
as a search through a space of potential solutions, the search to 
a specific destination being guided by heuristics. 

The first successful expert system was the mass-spectro- 
gram interpreter DENTRAL. There are many other well known 
expert systems. They include the geological system PROSPEC- 
TOR which found a previously unknown deposit of the 
valuable mineral molybdenum; the expert system RI for config- 
uring the DEC VAX computer system and HERSAY II for 
speech-understanding. In 1982, a system named EURISKI, 
which improves and extends its own body of heuristic rules 
automatically, made a breakthrough in very large scale integra- 
tion developments by inventing a 3-dimensional AND/OR 
gate. 

Inthe machinery condition monitoring field, expert systems 
have been produced to guide the user in diagnosing fuel related 
faults in diesel engines. Also, within LR research activities 


expert system techniques have been embodied in software 
rules applied to diesel engine fault diagnosis with some 
success. The earlier discussion of the Condition Performance 
Monitoring and Predictive Systems for Diesel Engines 
Programme refers, and references [2] and [3] expand on this 
theme. In recent years considerable interest has been shown in 
the use of expert system technology for condition monitoring 
purposes by the Japanese engine builders. 
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Figure 5.8 Principal Al Divisions 


5.5 Neural Networks 


The human brain is a highly developed neural network. It 
comprises an enormous communications network of cells 
called neurons. A worm has 1000 neurons, a housefly has one 
million (10°) and a human has one hundred thousand million 
(10"'). In the human brain each neuron is connected to between 
1000 and 1,000,000 other neurons. Each neuron is a processing 
unit which receives and combines signals from many other 
neurons through synapses. It is the synaptic efficiency or 
strength which is modified when the brain learns. 

Simulated neural networks are software models, Figure 5.9, 
based on various interpretations of the structure and function- 
ing of the brain. The artificial neuron is called a processing 
element or node. It has many input paths, and combines, 
usually by summation, the input values it receives. The 
combined input is then modified by a transfer function which 
can be chosen to suit a particular application. This new value 
becomes the output and can be connected to the inputs of other 
processing elements through weighting functions which corre- 
spond to the synaptic strength of biological neural connections. 
Each ‘weight’ hasa value which is used to modify the data pass- 
ing through it. As in the biological brain the neural network 
learns by altering the value of its weights. Ina simulated neural 
network the weights are altered to try and reduce the error 
between the output the network produces to a particular input 
pattern, and the required output. This is an iterative process, 
carried out as the patterns to be learnt are presented; an algo- 
rithm calculates the error and changes the value of the weights 
accordingly. The method is analogous to a child being taught 
to speak, where the child learns the word by trying to match 
the sound he hears, and the way it is made by the teacher, with 
his own version during a process of repetition. 

Thus a trained neural network contains all its knowledge in 
the values of the connections between the nodes, the values of 
the weights. A neural network consists of many processing 
elements joined together, usually in groups called layers. 
A general structure of a net would be a sequence of layers, start- 
ing with an input layer, followed by a number of hidden layers, 


hidden in that they have no direct connection to the outside 
world, and concluding with an output layer. 

Neural networks can be thought of as general purpose 
pattern classifiers or matchers which are trained ona represen- 
tative set of patterns or data. They are capable of classifying 
patterns which are not in the training set; in other words they 
can generalize or interpolate. They also have the ability to 
recognize noisy or partly corrupted patterns. They are fault 
tolerant in that the network will accept a certain amount of 
damage before any significant reduction in performance can be 
detected. 

The majority of applications and research using neural 
network techniques have been concentrated in the field of 
speech recognition, machine vision, robotics, pattern classifi- 
cation, optimization, weather forecasting, image processing, 
medical diagnosis and, in the financial world, credit worthi- 
ness. The development of neural networks for applications in 
engineering generally, and condition monitoring in particular, 
is in its infancy. However, Smiths Industries have carried out 
research into the use of neural networks for the diagnosis of 
faults in gas turbine engines from acoustic data and a network 
has been constructed based upon their ideas. Pratt and Whitney 
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Figure 5.9 An Example Neural Network 


have been developing a gas turbine monitoring system 
comprising three neural networks. One detects the fault, the 
second diagnoses the fault and the third gives an indication of 
its severity. 

A back-propagation network was trained by LR with the 
healthy engine data from the diesel engine used for the ‘Addi- 
tional DEEDS Evaluation Trial’ at RAE Pyestock. The inputs to 
the network were engine speed, engine power, ambient temper- 
ature and ambient pressure, with the outputs being 44 
parameters either measured on the engine or derived from 
measurements. Therefore, the network was designed with 
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Figure 5.10 
Modelling of a Healthy Engine by Neural Networks 


4 nodes in the input layer, 21 in the hidden layer and 44 in the 
output layer. 

The network was trained with 93 examples of healthy engine 
data and tested with a further 27. The values of the input ranges 
were as follows: 

Engine speed 595 to 1200 RPM 
Engine power 98 to 500 kW 
Ambient pressure 1.0053 to 1.0239 bar 
Ambient temperature 22.4 to 28.5 Celsius 


The results are shown for the engine turbocharger speed, as 
one of the 44 output parameters, specified against engine speed 
and power in Figure 5.10a and plotted against ambient pressure 
and temperature in Figures 5.10b and 5.10c respectively. It can 
be seen from the Figures that the network reproduces the values 
of turbocharger speed for the healthy engine against all four 
input variables with high accuracy. Similar accuracies were 
obtained for other engine performance parameters. 

The success of neural networks in predicting the values of 
critical performance parameters for a healthy engine, using 
certain basic measurements, allows such networks to be used 
to provide valuable yardsticks by which to judge possible dete- 
rioration, or improvement, in future engine performance. 


5.6 Statistical Analysis Methods 


5.6.1 Testing for Outliers 


Sometimes a set of data contains one or more observations, or 
vector of observations, which fall outside the pattern exhibited 
by the majority of the values. Such an observation is usually 
described as an outlier. What appears to be a freak value may 
be a perfectly genuine result, merely an indication that the 
assumed model is inadequate in the region of the doubtful 
point, but, in general, the uncritical submission of a collection 
of data to some form of analysis may lead to wildly misleading 
conclusions if real outliers are present. 

The detection of outliers is difficult and, if dealt with in an 
ad hoc manner, could lead to conclusions just as misleading 
as if the outliers had remained undetected. The rejection of 
data because they look ‘wrong’, or do not fit in with pre- 
conceived ideas of how the generating model should behave, 
may well lead to the wholesale abandonment of worthwhile 
information. 

To show how a screening module would fit into a condition 
monitoring system a very simple flow diagram for the treat- 
ment of data in the overall system is given in Figure 5.11. 

It will be seen that no data from the various measuring 
points are taken until running conditions are satisfactory. It is 
envisaged that ‘satisfactory’ in the context of main marine 
machinery should imply reasonable sea conditions and the 
engine operating at near full load. If these conditions are not 
met then some delay time of h; hours should be agreed before 
trying again. A typical value of h, might be 1 hour or more, but 
it is important that delays should be small enough to ensure 
that, as far as possible, data sampling throughout the voyage 
is maintained at a reasonably constant rate. 

Once data have been recorded they are passed immediately 
through the screening module. Acceptance, or otherwise, of the 
data by the outlier test would be practically instantaneous and 
available to the crew member operating the data logging 
console via a screen message. If unacceptable, the data set 
would be displayed so that the suspicious data could be iden- 
tified and corrective action taken, or the complete data set 
retaken. Satisfactory data sets would be added to a data bank 
and, if necessary, the oldest set would be dropped or removed 
to a larger and more permanent historical record. 
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Figure 5.11 
Suggested Basic Flow Diagram for Data Handling 


The screening sub-system in this example is an application 
of Wilks’s multivariate outlier test. Details of the test were 
presented by Caroni and Prescott [12] and are outlined briefly 
in the attached Appendix 5. The purpose of the test is to exam- 
ine information, collected ona regular basis, for indications that 
certain data sets do not fit into the general pattern and should 
be scrutinised closely for obvious errors. 

The module may well form a valid condition monitoring 
function in its own right but it does not attempt to show 
which of the various measurements within the data set are 
suspect; it merely highlights the fact that the data set as a 
whole does not conform with the information gathered so far. 
The output consists of the suspect set of data, the value of 


nN 
Ww 


Wilks’s outlier test coefficient and the probability of obtain- 
ing such a coefficient by chance under assumptions of 
normality 

Within LR’s current condition monitoring research 
programme an association witha major container ship operator 
has provided a wealth of daily data collected at numerous 
measuring points on each of four vessels, and the screening 
module has been applied toa set of data froma particular vessel 
over the period from January 6th to July 5th 1994, 103 days in 
total. The results of this application are outlined below. 

Examination of the data suggested that certain parameters 
would give useful indications of the general condition of main 
engine performance and these were analysed accordingly. 


Applying Wilks’s test indicated that one data set wasa very likely 
outlier. The value of Wilks’s coefficient obtained was 0.2133 and 
the probability of occurence of a coefficient as low as this by 
chance was less than 1 in 10000. Scrutiny of the 103 observation 
vectors brought to light that the vector for the suspected outlier 
contained generally the very lowest data values recorded during 
the whole period. Figure 5.12 shows the distribution of Wilks’s 
coefficient for the complete sample of 103 observations and high- 
lights how unlikely it is that a coefficient as low as 0.2133 should 
occur under normal circumstances. 

The probability associated with each value of Wilks’s coeffi- 
cient for a sample of 103 observations is illustrated in Figure 5.13. 
It will be seen that probability is very sensitive to slight changes 
in coefficient and the graph emphasises again how unlikely it is 
that the suspect observation is consistent with the total sample. 

The results of this work confirm the value of this and other 
effective screening methods in establishing the validity of 
acquired data sets prior to subsequent condition monitoring 
analysis. 
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Figure 5.12 
Frequency Distribution of Wilk’s Coefficient 


5.6.2 Sequential Analysis 


Sequential analysis techniques have been applied to daily aver- 
ages of the nine cylinder exhaust temperatures, taken during 
voyages of the container ship referred to in Section 5.6.1., with 
an additional seventy sets of observations, to determine whether 
any significant changes have taken place. Clearly, exhaust 
temperatures will vary as a result of changes in demand made 
upon the engine and to compensate, a simple regression model 
of the expected average temperature, T., has been formed as 
follows. 


T,.=a+b(rpm) +c(Load) +d(HP) +e(Controlair setting) +f(Torque) 


where a, b, c, d, e and f are constants obtained via linear regres- 
sion techniques. 
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Figure 5.13 
Probability Associated with Wilk’s Coefficient 


The data consists of daily sets of measurements extracted 
from the main engine alarm and monitoring equipment fitted 
to the vessel. 

The daily errors, or departures of the actual average cylin- 
der exhaust temperatures from the expected value T., were 
accumulated and plotted against the number of observations. 
This procedure was continued until the trace reached one of 
3 decision areas. At this point the appropriate decision could 
be taken on whether the average temperature had or had not 
departed from the expected value by a minimum of some 
previously agreed figure. In the latter case, no corrective 
action was called for, the sum of errors was zeroed and the 
procedure restarted at observation No.1. On the other hand, 
evidence of a significant change would require investigation 
and, possibly, remedial work being done before testing 
restarted. 

Examples of the sequential plots are given in Figures 5.14 
and 5.15. The equations of the four lines forming the bound- 
aries of the decision areas are functions of the following: 


(i) the risk of accepting that a significant change has taken 
place when it has not (0.01); 

(ii) the risk of accepting that a significant change has not 
taken place when it has (0.01); 

(iii) the standard deviation of the daily ‘errors’ (7 °C); 

(iv) the departure from normal which it is desired to detect, 


either in a positive or a negative direction (5 °C). 


Full details of the necessary calculations may be found in [13]. 

The figures in brackets are the parameter values tentatively 
adopted for this example. An assumption has been made that 
the daily errors, defined above, have arisen from a Normal 
distribution and inspection of the data from the vessel lends 
reasonable support to this hypothesis. 

From Figures 5.14 and 5.15 it can be seen that a decrease 
of at least 5°C was detected in the first 3 sets of observations 
1 to 14, 15 to 50 and 51 to 62. The fourth set shows the trace 
actually passing through the middle decision area as a result 
ofa large error for observation 83, the same observation which 
was detected as an outlier in Section 5.6.1. Figure 5.15a shows 
the same data with the omission of the suspected outlier, with 
the trace eventually passing into the ‘NO CHANGE’ decision 
area (observations 51 to 97). The next two figures (observa- 
tions 98 to 126 and 127 to 150) show the trace passing into the 
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Figure 5.14 
Sequential Analysis of Container Vessel Data — 
Observations 1-83. 
(Vertical Scales - Accumulated Deviation from ‘Normal’, 
Horizontal Scales - Observation Number) 
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Figure 5.15 
Sequential Analysis of Container Vessel Data — 
Observations 63-173. 
(Vertical Scales —- Accumulated Deviation from ‘Normal’, 
Horizontal Scales - Observation Number) 


‘SIGNIFICANT INCREASE’ decision area. The last trace for 
observation 151 to 173 suggests that an increase of at least 5°C 
will again be detected after a few more observations. 

The parameters of the sequential scheme may be changed 
at will, but any alterations will affect the average sample size 
before reaching a decision and the probability of missing a 
significant change in cylinder temperature. It is easy to make 
the test too stringent, with a corresponding increase in the aver- 
age length of time before a decision may be reached. Fora useful 
application of this method the parameters need to be carefully 
balanced in the light of the actual distribution of errors and the 
important changes which it is desired to detect. Overall though, 
the sequential test should result in decisions being made on the 
parameter of interest in a significantly shorter time than for 
other conventional sampling methods. 


5.7 Reliability and Availability Assessment 


A model has been developed, [14] and [15], which attempts to 
predict the probability of defects occuring in similar equipment 
fitted toa number of ships. Normally with this type of problem 
it is assumed for simplicity that the defect rate does not change 
with time, but experience shows that in general this assumption 
is unrealistic, certainly where large items of machinery, such as 
marine diesel engines, are concerned. 

The model used in this study is a modified form of the nega- 
tive binominal distribution defined by two non-negative 
parameters o and f, which caters for a defect rate which may 
increase with time. It also allows for those cases in which collec- 
tion of defect data begins at some time, t,, after commissioning 
and can accommodate varying numbers of items at risk, nj, in 
different, and not necessarily equal, time intervals, t, to t;. The 
values of the parameters are estimated from actual data using 
maximum likelihood considerations. 

The expected number of defects, E[r;], in the time interval t, to 
t, is given by, 


E(rJj= o. nj (exp (Bt) - exp (Bt) 
B 


The reliability, R(T), of a single item is defined as the probability 
of zero defects in the time interval t, to t, + T, and is given by, 


R (T) =(1 + exp (Bt exp (BT) - 1) «/8 


Table 5.2 presents the defects occuring on four auxiliary gener- 
ators of the same type fitted to a Ro/Ro vessel. The parameter 
estimates were: 
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The cumulative number of defects fitted by the model, E[r;], are 
shown in column 5 of Table 5.2. 

The reliability of a single generator over the period 1.5 to 2.5 
years was estimated as 0.53 using the above equation for R(T), 
with: 


t, = 15 
T= 1 


The equivalent reliability estimate assuming a constant failure 
rate was 0.13. Clearly, the constant failure rate model results in 
a severe underestimate of reliability in the early part of the 
equipment'’s life and a corresponding overestimate in later time 
periods. 


6. LR CONDITION MONITORING SYSTEM 
FOR ROTATING MACHINERY 


The Technical Investigation, Propulsion and Environmental 
Engineering (TIPEE) Department has supplied a range of advi- 
sory services over many years. These have included general 
engineering concerned with marine main 
propulsion and auxiliary machinery and often including the 
analysis and interpretation of noise and vibration data. Expe- 
rience has also been gained by performing vibration surveys 
of steam turbine plant to support requests to classification soci- 
eties for the postponement of ‘opening out’ surveys. In 1989 a 
ship operator, aware of the Department's experience with 
condition monitoring, asked if a vibration based condition 
monitoring system could be produced for rotating machinery 
on two new vessels. The system that was supplied has been 
developed further and has now been installed on many vessels. 

To gain an appreciation of the operation of modern condi- 
tion monitoring systems, a description of the present LR system 
follows, together with practical examples of its use. 

Although it is not an LR Class requirement to apply vibra- 
tion monitoring to surveyable items, satisfactory vibration data 
can be accepted to support a decision not to require the opening 
up of a machine for survey. To ensure that this potential benefit 
of the condition monitoring system will be a maximum, for LR 
Classed vessels a list of all the rotating machines contained in 
the master list of surveyable items is compiled. Added to this 
list are machines of particular concern to the ship operator. 
Then the desirability of applying vibration monitoring to each 
of the machines on the list is considered. For example, for small 
motor driven pumps performing non-essential functions, it 


investigations 


may be acceptable to operate until failure occurs, rather than 
to monitor vibration levels on a regular basis. Having decided 
on the machines to be monitored, the next step is to specify the 
faults that are to be identified and select suitable vibration 
parameters to be measured. For example, vibration velocity is 
used to indicate faults such as imbalance or misalignment. 
Machine construction details are examined to locate suitable 
measurement positions. The system includes a facility to input 
manually the value of parameters associated with the perfor- 
mance of a machine, such as pressures or motor current, so 
these are also identified at this stage. 

Each vibration or performance parameter is assigned a level 
at which an alarm will be generated, indicating to the user that 
action is required. Great care must be taken when setting these 
alarm levels to ensure that machine faults are identified early 
in their development and to maintain the operator’s confidence 
in the system. The alarm levels used are based on LR’s experi- 
ence, coupled with the recommendations given in various 
International Standards, and are reviewed periodically. The 
machine details, measurement parameters, locations and limits 
form a database created using the software supplied with the 
system. 

The frequency of monitoring required for each machine is 
then decided, taking into account factors such as how critical 
it is and how often is it run. Machines are grouped together to 
produce ‘circuits’ that form convenient routes for each 
measurement period. 

The system hardware comprises a lightweight battery 
powered portable data collector connected to a hand held vibra- 
tion transducer and a desktop computer, see Figures 6.1 and 6.2. 
The data collector is connected to the host computer by a cable 


Figure 6.1 
The LR Condition Monitoring System for Machinery 
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Figure 6.2 The Collection of Vibration Data 


and loaded with information about the machines to be moni- 
tored for the circuit selected. This information contains details 
of the points on each machine at which measurements are to be 
taken and the type of parameter to be measured; for example, 
velocity (mm/s rms), acceleration (mm/s? or ‘g’). The operator 
willbe informed by the display screen of the data collector which 
machine is to be monitored and the sequence in which the 
measurements are to be taken. If any parameter exceeds a pre- 
set level a warning is given at the time of the measurement. 
Other data for instance from pressure gauges, can also be input 
using a keypad. On completion of the circuit the data collector 
is again connected to the ‘host’ computer and the measured data 
down-loaded on to the database. In some instances, the 
shipowner requests that the system be ‘hard wired’ into the 
vessel and the host computer and this can be accommodated. 
The associated computer program controls the transfer of 
data to the host computer machinery database and provides 
the subsequent analysis and display of results. Various func- 
tions are supported, including trend analysis, anomaly 
reporting, guidance on the possible nature of faults and spectral 
analysis. In addition to these functions a record history of the 
machines will eventually be created. The software can provide 
an interface with an engine room datalogger which will allow 
performance parameters and running hours to be input auto- 
matically to the machinery database. An additional facility is 
communication with a computerised planned maintenance 


system so that vibration readings exceeding alarm levels can 
be used to initiate maintenance recommendations. 

Installation of the system involves loading the software on 
to the host computer and the acquisition of a complete set of 
initial measurements using the data collector. Subsequent 
measurements can be compared to these baseline readings and 
changes monitored. 

Two important aspects of any condition monitoring system 
which are often overlooked are the requirements for regular 
calibration of instrumentation and for training in the use of the 
system. Training should be an ongoing process so that the abil- 
ity to operate the system efficiently is not compromised by 
changes in personnel. 

The comments received from shipboard operators of the 
system indicate that they regard vibration based condition 
monitoring as a useful tool. The two major benefits are 


. It simplifies classification survey because selected 
machines can be surveyed on the basis of a history of satis- 
factory condition and operation rather than being 
dismantled for inspection. 

° It can be used for the detection of faults and the planning 


of maintenance 


By way of example of the system’s use, three case histories 
follow: 


Case history 1 


It was noticed that the readings on a heavy fuel oil purifier were 
increasing gradually, particularly in terms of vibration accelera- 
tion measured on the bow! casing. This parameter reached its 
alarm point and on examination, heavy drive gear wear was 
found. Both horizontal and vertical drive shafts, complete with 
worm and wheel gears, were replaced. Figure 6.3 shows the time 
history of the bow] casing vibration (in units of ‘g’) over 480 days, 
indicating the return of the vibration to normal levels following 
the overhaul (indicated by the O/H annotation). 
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Figure 6.3 


Time History for Heavy Fuel-oil Purifier Bowl 
Casing Vibration 


Case history 2 


Measurements at the free end bearing of an electric motor driven 
evaporator pump indicated a sharp increase in the value of the 
parameter GSE which shows changes in the high frequency vibra- 
tion emitted by rolling element bearings. An increase in this value 
indicates a damaged bearing. High axial vibration on the electric 
motor was also measured, indicating possible misalignment 
between the motor and pump. The pump was opened up for 
inspection and the free end pump bearing was found to be in a 
very poor condition. The associated time history of bearing ‘GSE’ 
is shown in Figure 6.4. After replacing the bearing and re-aligning 
the motor and pump, the vibration levels returned to normal. 
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Figure 6.4 
Time History for Evaporator Pump Bearing Vibration 
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Case history 3 


Figure 6.5 shows a time history and spectral ‘signature’ for a 
generator engine turbocharger. Spectral analysis indicated that 
high frequency components were the cause of the increasing 
vibration, possibly due to a bearing defect. The turbocharger 
was overhauled and the vibration returned to a satisfactory 
level. 
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Figure 6.5 
Time History and Frequency Spectra for Generator 
Engine Turbo-charger Vibration 


7. DEVELOPMENTS IN CONDITION 
MONITORING 


The majority of existing condition monitoring systems in use 
on vessels are based on the monitoring of vibration, and a 
limited number of performance parameters, from rotating 
machines. The systems tend to be self contained and links with 
other systems, such as a planned maintenance system, are not 
yet extensive. The facilities for diagnosing faults from 
measured readings and for predicting when maintenance will 
be required are valuable. They can be expected to be improved 
as technology is advanced. 

For reciprocating machinery, on-line monitoring can now 
provide the direct wear measurement of specially manufac- 
tured piston rings in some large two-stroke diesel engines. 
Also, where cylinder liner point temperature measurements are 
provided, symptoms of gas blow-by can be detected, indicating 
deterioration in the piston ring gas sealing function. Otherwise, 
the monitoring of diesel engines continues to focus on main- 
taining the efficiency of the combustion process, using 
improved technology to measure cylinder pressure cycles. In 
some cases instrumentation is also provided to reveal the 
behaviour of the fuel injection equipment, but cost and lack of 
durability of the equipment tend to inhibit its widespread use. 

How do these descriptions of the present status of condition 
monitoring for rotating and reciprocating machinery compare 
with what the modern shipowner wants? One must remember 
that the main driving force for the use of condition monitoring 
is the prospect of cost savings. These savings are achieved by 
initiating maintenance only when the condition of the machine 
indicates that it is necessary. On this basis it is apparent that 
major improvements are required in the area of diesel engine 
condition monitoring. 

The research discussed in this paper has opened up a 
number of possibilities for future developments. It is believed 
that these should be first directed towards engine and other 
machinery components which are causing concern. This may 
be because undetected deterioration is occurring to an unac- 
ceptable degree, or because more precise information is 
required to allow a safe extension of operation of the compo- 
nent before maintenance must be applied. If possible, the 
monitoring techniques to be used should not require expensive 
additional instrumentation, and ideally should utilise the 
output from the normal instrument outfit. 

It is believed that the techniques described in this paper, 
applied progressively to the analysis of data obtained from 
diesel engine performance parameter measurements, will 
produce increasingly useful information about engine health. 
When such information is correlated with factual information 
about faults found in an engine, diesel engine diagnostic capa- 
bilities will advance significantly. Improvements in fault 
diagnosis in other machinery and systems will follow as the 
power of these techniques is established and improved. 

Without waiting for new techniques to be perfected, there 
are benefits to be realised by using existing maintenance infor- 
mation sources more effectively. For example a typical engine 
control room may have computerised systems for data logging, 
planned maintenance, condition monitoring, combustion 
monitoring and piston ring monitoring. Further information 
may be in the form of lubricating oil analysis results and clas- 
sification survey reports. Ideally all these data sources should 
be interrogated when deciding on maintenance actions but, at 
present, this is far from easy when the data is in differing 
formats. An integrated system is required, which will enable 
data from the different sources to be extracted, analysed and 
displayed in whatever combination the operator wants. To 
avoid ‘data overload’, human/computer interfaces must be 
developed to assist intuitive operation. 
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Further economies may be possible in the use of condition 
monitoring of rotating machinery. Many existing systems do 
not take account of the inherent reliability of some machines, 
or the degree of acceptability of the consequences of failure of 
a machine. The use of maintenance management techniques 
such as criticality assessment and reliability analysis can be 
expected to improve the effectiveness of applied condition 
monitoring procedures in the future. 

The continuing search for ways of reducing the costs of 
machinery operation continues to be promoted by advances in 
technology and management methods. These advances require 
ever higher levels of knowledge and skill in the engineers who 
hold local responsibility for safe and economic operations. The 
predicted shortfall of qualified deck and engineer officers, [16] 
will require consideration when planning the technological 
advances to be incorporated in future generations of ships. 


8. CONCLUDING REMARKS 


Vibration monitoring is the most universally successful condi- 
tion monitoring technique available today, and its predominant 
position is expected to be maintained in the future. Develop- 
ments will extend its applications as new ways of obtaining 
and interpreting vibration data are found. These developments 
will lead to increasingly accurate diagnosis of faults. 

The LR system used at present provides powerful analysis 
tools which fulfill the requirements of today. Work currently in 
progress will, in the near future, produce improvements in 
presentation graphics, coupled to improved analytical meth- 
ods. These improvements in software will be allied to improved 
hardware to form a new vibration monitoring and analysis 
module. This module will bea key component of the next gener- 
ation of the LR shipboard Condition Monitoring System for 
machinery as well as widening the current scope of the capa- 
bility. 

Advances in the direct measurement of wear of the compo- 
nents of reciprocating engines in service may stem from the 
progress being made in the field of system lubricating oil anal- 
ysis. For critical wear components, such as crankshaft bearings, 
it would be possible to incorporate a small quantity of an indi- 
cator metal not used in any other part of the engine. This 
indicator metal would begin to wear and show up in lubricating 
oil analyses when the wear of a bearing had reached the point 
where replacement would soon be advisable. This example 
illustrates how advances in wear measurement technology 
could benefit condition monitoring and survey decision 
making. 

Efforts being made to interpret the data obtained from the 
regular measurement of engine performance parameters will 
produce increasingly valuable information about engine condi- 
tion. When allied to records of fault and maintenance history, 
it is foreseen that reliable diagnostic capability will result. The 
development of suitable software, capable of screening and 
analysing such data, is intended to lead to the production of 
condition monitoring modules which will provide specific 
information about machine or component condition. 

Inall fields of condition monitoring, the application of statis- 
tical analysis can be expected to produce improvements in the 
screening and evaluation of raw data. These improvements 
should assist the accurate discernment of significant changes 
in measured values, which will encourage wider use and 
increase confidence in the technique. 

The application of condition monitoring information to 
maintenance activities is intended to produce savings in the 
cost of maintenance and improved operational reliability of 
machinery and systems. For the successful achievement of 
these aims, the correct interpretation of condition monitoring 
data and its effective use in managing maintenance activities 
are vital. Improved methods of analysis and the development 
of diagnostic capabilities will enable further advances to be 
made. 

In maintenance management, it is foreseen that more formal 
training of chief engineers will be required. It may also be neces- 
sary to require monitoring and recording of the effectiveness 
of individual applications where maintenance is decided on the 
basis of monitored condition, to ensure that acceptable levels 
of reliability and safety are being achieved. 
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APPENDIX 1 
MERLIN SIMULATION PACKAGE 


MERLIN isa generalised diesel engine performance prediction 
model, developed by Lloyd’s Register [7], and is based on the 
application of thermo-fluid conservation principles to intercon- 
nected open flow systems representing engine components 
such as cylinders, plena, heat exchangers and so on. The differ- 
ential equations representing these processes are integrated 
with respect to either time or crank angle, and are equally appli- 
cable to both constant speed and transient operation. 

MERLIN consists of thermodynamic control volume and 
one-dimensional models, called engineering building blocks 
(EBBs), each of which represents an engine component. The 
engineer creates his engine system by manipulating these 
elements into the desired configuration. 

There is a large number of EBBs available to the user, and the 
flexibility provided for in the connection of these elements 
allowsa highly complex system to be created ina relatively short 
time, although the data preparation may be protracted. All of 
the individual parameters of the EBB submodels are adjustable, 
thereby allowing an engineer to create an engine model which 
confirms closely to the design requirements. After the desired 
system has been constructed and the input data entered, then 
MERLIN proceeds to calculate the performance of the engine 
system, and provides a range of performance analysis files. 


Figure Al shows the layout of EBBs for a twin entry 
turbocharged medium speed diesel engine, pulse 
turbocharged and with 4 valve cylinder heads. Poppet valve 
flow characteristics were obtained from [17] and the combus- 
tion correlation coefficients were obtained from data presented 
in [18]. 

Air filter blockage simulation was controlled by the equa- 
tion: 


Pressure Loss = kdu? 
2 


where k is a constant, d is the fluid density and u is the velocity 
of the fluid through the filter. The value of k appropriate for 
the healthy engine condition was found by an iterative proce- 
dure, assuming a value of 0.5 kKN/m? pressure loss at mid 
speed-load operation i.e. 900 rpm and 0.37 grams./cycle/cylin- 
der fuel rate. 

The results from the MERLIN simulations are, of course, 
perfect in the sense that for any given configuration the engine 
parameters will always take the same values, after the relevant 
number of iterations necessary to reach cyclic convergence 
conditions. In practice, convergence is defined by certain finite 
limits, these limits being user specified, typically requiring gas 
states and shaft torques to agree, ona cyclic basis, to within less 
than 0.25%. 


The Merlin representation of the six cylinder, 
four stroke diesel engine 
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Figure Al 
The MERLIN Representation of the Six Cylinder, Four Stroke Diesel Engine 
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APPENDIX 2 
DISCRIMINANT FUNCTIONS 


Consider first the problem of discriminating between two n- 
dimensional populations. Let xijk be the kth. observation on 
the jth. variable from the ith. population, with i = 1,2 and j = 
1,2,...n. Let mij be the expected value of xijk, ie mij = E[xijk], 
and let M1, M2 represent the (n,1) vectors 


mii m21 
mi12 m22 
e e 
M1= M2= 
e e 
e ° 
min m2n 


Replacing M1 and M2 by the sample vectors X1 and X2, it is 
required to find a linear compound 

Y =a’X, where a’ is the transform of the (n,1) vector a, 
for summarising the (n,1) vector, X, of observations from an 
unknown population so that it may be decided whether those 
observations should be assigned either to population 1 or to 
population 2. 

If the (n,n) matrix, S, is the sample variance-covariance 
matrix, pooled from all observations xijk for both populations, 
then 

Ela’X] = a’E[X] 


Via’] =a’Sa 


It is required to find the (n,1) vector a, such that 
_ (Y¥1-Y2)(¥1-Y2) 
VIY] 
_ [a’(X1-X2)]la’(X1-X2)] 


a’Sa 


is a maximum. 


In other words, the discrimination between the means Y1 and 
Y2 is a maximum, taking into account the within-population 
variance a’Sa. 


aw. _ 2(X1-X2)(a’Sa)a’(X1-X2) - 2Sala’(X1-X2)]la’(X1-X2)] 


da (a’Sa)(a’Sa) 
_ 2[(X1-X2)(a’Sa) - Saa’(X1-X2)]a’(X1-X2) 
(a’Sa)(a’Sa) 
For a maximum, dW -9 


a 
Therefore, 


(X1-X2)(a’Sa) = Saa’(X1-X2) 


or (X1-X2) = Sal@ OC12X2)1 


a’Sa 
But a’(X1-X2)/a’Sa is a scalar, and as W is unaffected by any 
constant of proportionality, we may write 


a =S'(X1-X2) 
where S" is the inverse of S. (Al) 
Hence Y = a’X 

= (X1-X2)’S'X (A2) 


Note that, since S" is symmetric, S! = (SY 


For population 1, Y1 = (X1-X2)’S'X1 and 
for population 2, Y2 = (X1-X2)'S'X2. 
The mid-point of these means on the discriminant scale is 


(Y1+Y2) a 
7 has aah? 


(X1-X2)’S"(X1-X2) (A3) 


Combining equations (A2) and (A3) the rule may be formulated 
that if 


L12 = (X1-X2)'S"X - ns (X1-X2)’S(X1-X2) > 0 (A4) 


then the observations X come from population 1; otherwise 
they may be classified as population 2. 


Now (X1-X2)’S'X = X1’S"™X - X2’S'X 
and (X1-X2)'S"(X1+X2) = X1/S™X1 + X1’S'X2 - X2’S™X1 - X2’S1X2 
But X1’S"'X2 is a scalar, and so 

ALG he = EX key, 

= X2‘S"x1 

Therefore (X1-X2)’S"(X1+X2) = X1’S'X1 - X2’S'X2 
Hence equation (A4) may be rewritten as 

L12 =L1-L2 


where L1 = X1’S"X - 2 X1’S"X1 
and L2 = X2’S"X - : X2'S*X2 
For k populations the function Li may be formed, where 
© _ yvely_ 1 yyvo-ly; 
Lig ste >, Ss (A5) 


foti— hee 


Then the (n,1) vector of observations, X, is assigned to the ith. 
population if Li > Lj, j = 1,2, ..., k; i#. 
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APPENDIX 3 
A LIST OF CONDITION MONITORING 
TECHNIQUES 


Item Technique 


1.0 


8.0 


9.0 


10.0 


11.0 


Acoustic Emissions Monitoring 
Axial Flux Analysis 
Combustion Monitoring 
Cooling Gas Analysis 

Current Monitoring 


Electrostatic Debris Monitoring 
6.1 Exhaust Monitoring 
6.2 Intake Monitoring 


Exhaust Emissions Monitoring 
7.1. Chemi-luminescence 

7.2 Chromatography 

7.3 Electrochemistry 

7.4 Exhaust Smoke Monitoring 
7.5 Flame Ionisation Detector 
7.6 Infra-Red Analysis 

7.7 Photometry 

Ultra-Violet Absorption 
Wet Chemistry 


INI ™ 
0 COO ™ 


Exhaust Temperature spread Monitoring 
Liquid Crystal Thermography 
Low Cycle Fatigue Counting 


Lubricant Monitoring — General 
11.1 On-line Methods 
11.1.1 Capacitive & Inductive Detectors 
11.1.2 Electrically Conducting Filter 
11.1.3. Filter Monitor 
11.1.4 Magnetic Debris Detector 
11.1.5 Oil Turbidity Optical Monitor 
11.1.6 Spool Valve Contaminant Monitor 
11.1.7. Thin Film Contaminant Monitoring 
11.1.8 Ultrasonic Detectors (being developed) 
11.2 Off-line Methods 
11.2.1 Flash Point Measurement 
11.2.2 Fuel Dilution Measurement 
11.2.3. Insclubles Measurement 
11.2.4 Magnetic Plug Particle Collection 
11.2.5 Total Acid Number (TAN) 
11.2.6 Total Base Number (TBN) 
11.2.7 Viscosity Monitoring 
11.2.8 Water Content Monitoring 
11.3. Wear Particle Analysis 
11.3.1 Atomic Absorption Spectroscopy 
11.3.2 Atomic Emission Spectroscopy 
11.3.3. Microscopic Examination 
11.3.3.1 Analytical Ferrography 
11.3.3.2 Direct Reading Ferrography 
11.3.3.3 Ferrography 
11.3.3.4 Rotary Particle Depositor 
Spectrographic Oil Analysis 
X-Ray Fluorescence 
Infra-Red Spectrometric Oil Analysis 
Procedures (SOAP) 
Thin Layer Chromatography 


11.3.4 
iMbshs 
11.3.6 


Ie 4 


11.3.8 Blotter Spot Tests 
11.3.9 Filter Retention 


12.0 Non Destructive Testing 


12.1 Dye-Penetrate 

12.2 Leak Testing 

12.3. Magnetic Particle Testing 
12.4 Pressure Testing 

12.5 Radiography 

12.6 Ultrasonic Scanning 


Performance Monitoring 
13.1 Steady State Performance Monitoring 
13.2 Transient Performance Monitoring 
13.3 Machine Specific Parameters 
13.3.1 Combustion Air System Performance 
13.3.2 Cylinder Pressure 
13.3.3 Exhaust System Performance 
13.3.4 Liquid Levels 
13.3.5 Power Indicators 
13.3.6 Pressure and Temperatures 
13.3.7 Rotational Speed (RPM) Indicators 
13.3.8 Filter Performance 
13.3.9 Fuel Pressure 
13.3.10 Fuel Valve Needle Lift 
13.3.11 Piston and Valve Leakage 
13.3.1la_ Piston Ring Blow-by 
Measurement 
13.3.114b Pyestock Potmeter 
13.3.12 Piston Ring Scuffing Detection 
13.3.13 Run-down Time 


Sensor Health Monitoring 

Speed Fluctuation Analysis 
Stator Core Vibration Analysis 
Thermetric Efficiency Monitoring 
Transfer Function Analysis 
Trend Monitoring 

Vibration Analysis 

Visual Inspection - General 

21 CGTY. 

21.2 Endoscope 

21.3 Infra-Red Thermal Imaging 


21.4 Stroboscope 
22.0 Prediction of Time to Failure 


APPENDIX 4 

A GLOSSARY OF MACHINES AND SYSTEMS 
WITH APPLICABLE CONDITION MONITOR- 
ING TECHNIQUES 
Machine or System Condition Monitoring Technique 
Lubricant Monitoring 
Performance Monitoring 
Vibration Analysis 


Air Compressors 


Lubricant Monitoring 
Leak Testing 

Pressure Testing 
Performance Monitoring 
Vibration Analysis 


Air Conditioning Plant 


Boilers, Auxiliary Combustion Monitoring 
Exhaust Smoke Monitoring 
Pressure Testing 

Visual Inspection — General 
Boilers, Water-tube Combustion Monitoring 
Exhaust Emissions Monitoring 
Pressure Testing 

Performance Monitoring 
Trend Monitoring 

Visual] Inspection — General 
Infra-Red Thermal Imaging 
Feed Water Analysis 
Salinometers 

Chemical Analysis 

Total Dissolved Solids 

Oil in water 

Exhaust/flue gas analysis 
Flame monitoring 

Flue gas leakage 

Smoke detection 

Centrifuges Lubricant Monitoring 
Performance Monitoring 
Vibration Analysis 
Diesel Engines Combustion Monitoring 

Lubricant Monitoring 

Performance Monitoring 

Cylinder liner wear down - thin film 
resistance sensors 

Piston ring monitoring — magnetic 
proximity transducers 

High speed data 

Combustion chamber 

pressure characteristic 

Injection pressure characteristic 
Blow-by at exhaust valve 

Steady state 

Transient 

Mean Indicated Pressure (MP) 
Scavenging Pressure (applicable to 
2-stroke engines) 

Maximum Cylinder Pressure (Pmax) 
Expansion Pressure at fixed crank 
angle 

Angle at which max combustion 
pressure is observed (Apmax) 
Scuffing monitor 

Acoustic emissions 

Crankcase oil mist detection 


Evaporators 


Electrical Generators 


Electric Motors 


Gas Turbines 


Gearboxes 


Hydraulic Pumps 


Refrigerating Plant 


Pumps 


Steam Systems 


Steam Turbines 


Crankcase Pressure Monitoring 
Bearing weardown monitoring 


Pressure Testing 
Performance Monitoring 


Cooling Gas Analysis 
Performance Monitoring 
Vibration Analysis 
Insulation Condition 
Earth leakage monitor 


Axial Flux Analysis 
Cooling Gas Analysis 
Current monitoring 

Speed Fluctuation Analysis 
Vibration Analysis 


Acoustic Emissions Monitoring 
Electro-static Debris Monitoring 
Exhaust Emissions Monitoring 
Exhaust Temperature Spread Moni- 
toring 

Low Cycle Fatigue Counting 
Lubricant Monitoring 
Performance monitoring 

— Steady State 

— Transient 

— Run-down Time 

Vibration Analysis 

Visual Inspection 


Lubricant Monitoring 
Vibration Analysis 


Lubricant Monitoring 
Vibration Analysis 


Lubricant Monitoring 

Leak Testing 

Pressure Testing 

Performance Monitoring 

Vibration analysis (screw compres- 
sors) 

End thrust monitoring 

Backlash monitoring 


Acoustic Emissions Monitoring 
Performance Monitoring 
Thermetric Efficiency Monitoring 
Vibration Analysis 


Pressure Testing 
Infra-Red Thermal Imaging 


Lubricant Monitoring 
Performance Monitoring 
Vibration Analysis 

Visual Examination 

Axial rotor movement 
Temperature monitoring 
Bearing Temperature monitoring 
Expansion at sliding feet 

Speed monitoring 

Bearing wear down monitoring 


APPENDIX 5 
WILKS’S STATISTIC 


Given n independent p-dimensional vectors X,, Xz, ..., Xn, 
Wilks’s statistic may be derived as the likelihood ratio statistic 
testing the null hypothesis: 


H, : X; ~ Normal (Mean = M, Variance/Covariance Matrix = ) 
against the alternative hypothesis: 

H, : X; ~ Normal (Mean = M, Variance/Covariance Matrix = ), i4j 
and 

H; ~ Normal (Mean = M+a, Variance/Covariance Matrix = =) 


The parameters M and ¥ are unknown, as is the slippage factor 
aand the index, j, of the outlier. Consideration of the likelihood 
ratio leads to the test statistic Wj = |Aj|/|A1!, where A is the 
matrix of sums of squares and cross products, 


A=). (Xi- X).(Xi- XY, 


i=1 


Aj is the corresponding matrix with X; eliminated from the 
sample, | A! is the determinant of the matrix A, (X;-X)’ is the 
transpose of the matrix (X,-X) and X is the column vector of 
averages. 


S¥f 


The potential outlier is that point, index | say, the removal of 
which leads to the greatest reduction in | A|, i.e. the point for 
which the ratio is minimised. Wilks’s statistic is then defined 
as: 


(W)=IAI/IAI, 
j 


For ease of computation it is preferable to express D as 


Dia 1a (X= AS OO: 
n-1 


calculation of which involves finding the inverse of the matrix 
A, A", and the determination of a number of quadratic forms. 


For a given j the ratio W; follows a Beta distribution, as may be 
shown by relating W; to Hotelling’s T} statistic for comparing 
X; with the mean of the data X. T;* is such that 


(n- -1) > 
aa j ~ Fp.n-p-1, so that 
Welt TI ~ Beta {(n-p-1)/2, p/2 
= aot e { P iP \. 
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SYNOPSIS 


The latest legislation and technical requirements for USA 
OPA 90 and IMO on emergency preparedness are presented 
including those required for the SOLAS ISM Code. Computer 
structural modelling of various ship types and the ability of 
Lloyd’s Register to offer rapid technical support during ship 
casualties are covered. Such technical support includes calcu- 
lation of damage stability, damage longitudinal strength and 
oil outflow allowing for grounding reactions where present. 
About 50 million GT of shipping are now registered in LR 
SERS. The invoking and technical procedures are described and 
the need for future developments to enhance the technical and 
communication aspects of ship emergency response. 
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1. INTRODUCTION 


No matter how well a ship is designed, constructed, operated 
and maintained, accidents still happen. No transportation 
system is totally safe. Therefore as in other industries, 
planning for emergency response is a necessity. In the 1970's 
the number of serious ship casualties was more than 1,000 per 
year averaged over the 10 year period, with a world fleet of 
about 76,000 vessels greater than 100 GRT. Currently the world 
fleet of ships over 100 GRT stands at around 80,000; and over 
the last 10 years the number of serious casualties has remained 
steady at around 1,100 per year (see Figure 1). In addition, net 
insurance claims on the Lloyd’s Corporation market have risen 
from about £0.4 billion sterling in the seventies, through an 
average of £1.0 billion sterling during the eighties, to a current 
level of about £1.5 billion sterling per year. 

In 1982, as a result of requests from owners and operators, 
who were concerned at the rise in levels of marine casualties 
and associated insurance claims, Lloyd’s Register agreed to 
offer the marine industry an emergency service. This was called 
initially the Contingency Planning Service (CPS) (Reference 1). 
It provided levels of emergency preparedness which went 
beyond those already given by construction rules and codes 
and also the normal operational controls used by shipboard 
and shore-based staff. In those early years the CPS relied heav- 
ily upon the main frame computer using, for example, a 
technical system known as LR SHIPS (Reference 2). 

The rapid ship emergency response evolved greatly over the 
following years and in 1992 underwent a number of important 
enhancements, including a changeover from the original main- 
frame based system to the latest in PC technology. 

It is now known as the Ship Emergency Response Service 
(SERS) and is structured around pre-prepared computer 
models of the ships. These can be accessed rapidly during emer- 
gencies by teams of experienced surveyors and specialists who 
assess the incident and calculate floatability, damage stability, 
damage longitudinal strength and oil outflow. Grounding reac- 
tion calculations are an important element in this assessment 
when ships are aground with falling and rising tide effects 
taken into account. 

This proactive preparation of ship models is a key element 
to SERS. Only by generating and carefully validating the 
models in advance can SERS assist ship operators in meeting 
the technical requirements of current legislation. 

The aim of this paper is to provide a background to the 
development of the rapid ship emergency response and to 
discuss future enhancements which are expected to be 
advanced over the coming years. A summary of the technical 
requirements of current legislation is given, followed by a 
description of how the rapid emergency support is provided 
and the steps involved in enrolling a ship into SERS. 


Foundered 


Fire/Explosion 1229 (11.5%) 
1328 (12.4%) Missing 


40 (0.3%) 


Hull/Machinery 
3781 (35.2%) 


Wrecked/ 
Stranded 
2162 (20.1% 


Collision Misc 
1358 (12.7%) 81 (0.8%) 


Figure 1 
Serious casualties including ship losses 1985-1994 


2. LEGISLATION AND TECHNICAL 
REQUIREMENTS 


The shipping industry is going through an evolutionary 
process with ship safety and pollution prevention being major 
issues. Emergency preparedness and response is now 
addressed in three important pieces of recent legislation: 


1) IMO MARPOL Annex I Regulation 26 

2) USA OPA 90 

3) IMO SOLAS International Safety Management (ISM) 
Code. 


This legislation is encouraging and requires the operators 
and designers of existing and future ships to implement in 
advance, emergency preparedness procedures and systems 
aimed at dealing with the potential hazards which could occur 
to their ships. This proactive approach is conveniently 
summarised in Figure 2 which shows how emergency 
preparedness has always been provided firstly through design 
specifications and secondly through operations controls, both 
being preventative and mitigating in nature. 


Ship design Normal 


Emergency 


control — operational 


specifications controls planning 


Rules/Codes etc 


Rules/Codes etc 


Rules/Codes, etc 


Company 


Company 
Owners extras 


procedures SOPEP, VRP. etc 


Figure 2 
Emergency preparedness 


2.1 IMO MARPOL Annex I Regulation 26 


MARPOL Annex I, Regulation 26 applies to all tankers of 150 
GRT and above; and to all other ship types of 400 GRT and 
above. The legislation requires emergency preparedness in 
respect of oil pollution incidents and necessitates an approved 
Shipboard Oil Pollution Emergency Plan (SOPEP) to be carried 
on board each vessel. It is intended to cover both oil cargoes 
and bunker outflow. 

The requirements for Regulation 26 are described ina guide- 
line document (Reference 3); Section 2 of which lists the 
mandatory provisions. Strength and stability considerations 
are mentioned several times in Section 2 and are quoted below: 


“2.5.2.1.3 _ ...Procedures for dealing with suspected hull frac- 
tures should be included and they should carry appropriate 
cautions regarding attention to the effects corrective action will 
have on hull stress and stability. 


ps In addition to the checklists and personnel duty 
assignments mentioned in paragraph 2.5.2, the Plan should 
provide the Master with guidance concerning priority actions, 
stability and stress considerations, and lightering. 


2.5.3.2 Stability and Stress Considerations: Great care 
in casualty response must be taken to consider stability and 
stress when taking actions to mitigate the spillage of oil or to 
free the ship if aground...” 
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It should be noted that Regulation 26 does not specify how 
the facilities for damage stability and damage longitudinal 
strength calculations should be provided. It gives no standards 
by which to judge either the calculation methods or the compe- 
tency of those who carry out these calculations. 

The lack of clear standards in Regulation 26 is not helpful 
to the marine industry and has led to widely varying interpre- 
tations of the requirements. LR’s view is that these 
requirements are best met by the use of shore based computer 
systems which can be called upon 24 hours a day for rapid 
support. Shore based systems have the advantage of being 
remote from the ship and are therefore unaffected by power 
loss. They can be operated without involving shipboard staff 
in complex technical calculations within a high pressured envi- 
ronment, leaving them free to deal with rescue, salvage or 
firefighting operations. Furthermore, if the crew and master 
were to abandon ship, only the technical systems ashore would 
be effective. 


2.2 USA OPA 90 


Figure 3 shows the Exxon Valdez. In oil spill terms this was by 
no means the largest pollution incident in recent years. 
However the sensitivity of public opinion in the United States 
to environmental issues prompted the US Authorities to imple- 
ment the Oil Pollution Act in 1990, commonly referred to as 
OPA 90 (see Reference 4). This legislation has had a highly influ- 
ential and far reaching impact on the industry, particularly with 
regard to the design, construction and operation of tankers sail- 
ing in US coastal waters. 

Apart from the design and construction of tankers, and the 
implementation of double hull designs, much of the emphasis 
of OPA 90 is on clearing up and minimising the effects of oil 
pollution. There are however particular requirements relating 
to damage stability and damage longitudinal strength. These 
requirements are much more specific than those for MARPOL 
Regulation 26 and require that: 


¢ the technical information must be shore based 
a computerised system must be used 
the system must be capable of providing damage stability 
and damage longitudinal strength calculations both free- 
floating and aground 

¢ the system must be capable of assessing residual strength 
of the ship following damage to the hull girder 

e the system must be available 24 hours a day to assist in 
the assessment of offloading, ballasting or cargo transfer 

¢  thesystem must be capable of assisting in controlling hull 
girder stresses and grounding reactions. 


OPA 90 was finally implemented on 28th January 1995. 
OPA 90 calls for the appointment of a “qualified individual” 
who should direct the oil spill operations during the initial 
period. He should have the operator's authority to mobilise 
resources including oil booms, oil spill vessels, chemical disper- 
sants, etc. It is important to note that SERS is not involved in 
this type of direct support. 


2.3 IMO SOLAS International Safety Management (ISM) 
Code 


Many ship operators are already implementing measures and 
procedures within their own companies to meet the require- 
ments. The ISM Code will become mandatory for most types 
of vessel from Ist July 1998 (Reference 5), within which Emer- 
gency Preparedness is addressed in Section 8 in three main 
areas: 
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Figure 3 
Exxon Valdez 


1) identification of hazards and the implementation of 
procedures to deal with potential emergency situations 

2) establishment of drills and exercises to prepare for an 
emergency incident 

3) measures to ensure that the company can respond at any 
time to hazards, accidents and emergencies involving its 
ships. 


2.4 Proposals for Future Legislation 


In a recent submission to IMO Marine Environment Protection 
Committee, the German Administration has pointed out that 
there are requirements for ships to have and maintain several 
manuals and documents related to Emergency Preparedness 
in order to comply with all of the necessary IMO legislation. 
This places an onerous task on both office based and shipboard 
staff in the compilation, maintenance and familiarisation of 
these documents. It has been proposed therefore that all of the 
separate Emergency Plans be incorporated into a single plan 
known as the “Shipboard Emergency Plan” (SEP). 

The proposals for the incorporation of separate emergency 
plans into a single integrated SEP are being considered by a 
joint IMO Marine Safety Committee/ MEPC Working Group. 
The aims are to cover within the SEP, the requirements of IMO 
Regulation 26 (i.e. SOPEP), ISM and possibly other Flag or Port 
State Regulations such as OPA 90. 

The format and content of the SEP have yet to be decided. 
However, it is proposed that the plan (which may be a docu- 
ment or even a computer based application) should be tailored 
to the specific needs of the company and ship in order to avoid 
a situation where plans are simply duplicated from a “model 
plan” without taking account of any special requirements for 
the particular type or size of ship. 

It has been proposed that the Integrated Shipboard Emer- 
gency Plan should be based around a modular structure and 
include response actions for: 


fire 

damage to ship 

pollution 

security 

personnel 

cargo 

emergency assistance to other ships. 
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The implementation of SEP’s will have a beneficial effect on 
the industry and should improve the understanding and appli- 
cation of emergency preparedness amongst both shipboard 
and office based staff. 
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3. SHIP MODELLING PHASE 


The term “Ship Establishment” means the process by which the 
ship particulars are entered within the SERS computer systems. 
In establishing ships into SERS, computer models are created 
describing hull-form, internal compartment sub-division, 
permanent lightship weights and structural data such as 
permissible shear force and bending moment limits for an intact 
ship. This process usually takes between one and two weeks 
depending on the level of complexity of the particular ship 
being modelled. 


3.1 Modelling of Ships on the SERS Computer Systems 


The computer modelling is usually carried out on software 
called SEASAFE (Reference 6). This package has had extensive 
development within LR and is particularly suited to carrying 
out emergency calculations on damage longitudinal strength. 

The process of modelling a ship involves definition of the 
following attributes: 


hull-form 

internal compartmentation definition 
permanent lightweight 

longitudinal strength limits. 


The hull-form is defined on the basis of the vessel’s lines 
plan and/or the hull offsets. The structural drawings, capacity 
plans and loading booklet can be used to define the compart- 
ments. For stability calculations the as-built lightweight is 
entered as a total weight with a centroid relative to the model’s 
axis system. However, for longitudinal strength calculations 
the lightweight is also defined as a weight distribution along 
the length of the ship with the same centroid position. The 
longitudinal strength limits are entered as permissible still 
water shear forces and bending moments at selected stations 
along the length of the ship. The values are taken from the 
approved loading manual and may consist of both seagoing 
and harbour conditions for the intact ship. 


3.2 QA and Validation of the Ship Computer Modelling 


During the ship establishment procedure extensive quality 
checks are made to validate the computer model generated. 
This involves checking the results of the computer calculations 
against the information supplied by the Client under the terms 
of the contract. This is carried out as follows: 


¢ hull form characteristics are checked against the hydro- 
statics data supplied 

¢ the compartment and tank definitions are checked for 
volume and the position of centres against the informa- 
tion contained in the capacity plan and the approved 
loading booklet 

e the definition of lightweight distribution is checked for 
the total value and longitudinal centre of gravity against 
the information contained in the approved loading 
booklet 

¢ two loading conditions, usually one light ballast and one 
fully loaded, are selected from the loading booklet. These 
conditions are input to the SERS model and the results are 
checked for equivalence on draught, trim, stability, shear 
force and bending moments. 


The establishment of the ship is only considered complete 
when the technical details of the ship model have been 
checked against the standard tolerance criteria used for ship 
establishment. 


3.3 Establishment Phase Report 


Technical details of the computer model are summarised in a 
document called the ‘Establishment Phase Report’ which is 
issued for the lead ship in each group of sisters. Apart from 
summaries of volume, stability and strength data, this report 
also contains a summary of the validation checks made on the 
model. This report enables the Client to verify that the model 
is a true representation of his ship. 


3.4 Emergency Manual/Casualty Report 


For each vessel enrolled into SERS, a ship-specific Emergency 
Manual is provided which contains details on how to invoke 
the Emergency Service. The Manual also contains a Casualty 
Report Form on which details of the ship’s condition can be 
completed and then transmitted to LR’s Ship Emergency 
Control Centre at the start of an incident. 


3.5 Archiving of Emergency Response Data 


Once a ship has been established, the computer data and basic 
ship plans are stored ina rapid recovery archiving system. This 
consists of: 


¢ optical disk storage capable of providing rapid retrieval 
of data during an emergency 

¢ a back-up archive, held off-site as an additional security 
measure 

¢ a box file archive where principal ship plans and docu- 
ments supplied by the Client are stored 

¢ secure rooms accessible only to SERS team members with 
rigorous security precautions including a coded entry 
card system. 
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4. EMERGENCY CALCULATIONS 


At the start of an emergency the archived ship model is 
retrieved from optical disk and selected for analysis. In general, 
the analysis of a damaged ship during an emergency falls into 
three consecutive phases: 


1) _ simulation of the intact ship prior to damage 
2) simulation of the ship in its damaged condition 
3) simulation of proposed remedial! actions. 


The theory of grounding and oil outflow together with a 
worked example of ship emergency calculations can be found 
in the Appendices. 


4.1 Simulation of Intact Condition 


In order that the damage condition of the ship can be simulated, 
itis necessary that the intact load condition, along with the local 
sea-water density, is applied to the pre-defined model. This 
intact load condition is that applicable at the time of the inci- 
dent, and hence must allow for depletion of consumables if a 
departure condition is specified. Checks are performed to 
ensure that the model is equivalent to the condition of the ship 
as reported. These include verification that: 


e¢ calculated deadweight agrees with summation of 
supplied weights 
calculated draughts are consistent with supplied values 

e residual loading to achieve the supplied draughts has 
been correctly allocated 

¢ calculated intact stability satisfies appropriate stability 
criteria 

¢ calculated bending moments and shear forces lie within 
the envelopes of permissible values. 


4.2 Simulation of Damaged Condition 


A damaged ship can be free-floating or aground on a pinnacle 
or shelf. The status of breached compartments and, if applica- 
ble, the ship's draughts aground are required as input in order 
that calculations can be carried out to determine: 


floatability and buoyancy 

damage stability 

damage longitudinal strength 

liquid outflow and water ingress 

grounding reaction, location and rise in tide to lift-off 
the effects of change in height of tide. 


The program includes the effect of the grounding reaction and 
any changes in weights due to flooded water or cargo lost in 
the damaged compartments. The effect on the grounding reac- 
tion due to a change in the height of tide can also be included 
in the damage calculations. Actual free-surface effects are 
included throughout the calculations. 


4.2.1 Floatability 


The calculations for floatability include: 


draughts (mean, forward and aft) 

trim and angle of list 

deck immersion / freeboard 

location of damage relative to waterline 
grounding reaction and location 

rise of tide to lift-off. 


4.2.2 Damage Stability 


S The followin damage stability informatio1 can be 


determined 


- GZ curve 

° maximum GZ and its heel angle 

. positive range of stability 

. compliance with appropriate damage stability criteria 


hypothetical angle of heel for lift-off (if aground) 


4.2.3 Damage Longitudinal Strength 


Damage longitudinal strength information calculated can 
include 


° curves of bending moment (BM) and shear force (SF) 

° values of BM and SF and their percentages of permissible 
values, including frame locations 

° maximum values of BM and SF and their percentages of 
permissible values, including those values in way of 
structural damage and grounding location 


\ very conservative approach is taken in assigning limiting 
values of damage BM’s and SF's, reflecting 


ov 


for example, the 
degree and extent of reported structural damage, prevailing 
environmental conditions and ship location. A general aim is 
to ensure there is a reduction in the values of bending and shear 
stress which the hull has sustained in the region of the dama; 


with due regard to local strength. 


4.2.4 Liquid Outflow and Water Ingress 


Potential liquid (e.g. oil) outflow and water ingress for any 
particular damaged compartment can be provided based on 
free-flooding of the compartment or in accordance with hydro- 
static principles. The conservative assumption when 
calculating potential oil outflow is that all the cargo from the 
damaged tanks will be lost to the sea and free-flooding of the 
compartments takes place. The reporting of the location and 
extent of damage is required from the ship in order to undertake 
the calculation. The method used takes into account the effects 
of hydrostatic balance and exchange losses of two imisicible 
fluids of different density. The effect of an overpressure / under- 
pressure can also be taken into consideration when performing 
calculations. It should be noted that a fall in tide can substan- 
tially increase the potential for oil outflow from a grounded 
ship as the external head of sea-water keeping the oil in a 
compartment can be markedly reduced 


4.3 Simulation of Remedial Actions 


Proposed remedial actions to the ship can be readily investi 
gated to assist the client in choosing a safe and optimum course 
of action. Offloading of cargo, cargo transfer, dewatering, 
ballasting of tanks and full cargo discharge sequences, for 
example, can be assessed rapidly in terms of damage stability, 
damage longitudinal strength and oil outflow potential. For a 
grounded ship the stage at which the ship lifts-off can be readily 
identified and the calculation switched to a free-floating case 

For a remedial action involving a free-floating ship with 
free-flooding, “lost buoyancy” hydrostatics can be calculated 
and provided to the client if requested. This information can 
be used for basic shipboard calculations prior to the submission 
of specific remedial actions for SERS to validate independently 
The following can be supplied for an appropriate range of 
draughts 


° displacement 

. waterplane area 

° tonnes per centimetre immersion 

* moment to change trim by 1 centimetre 

. longitudinal, transverse and vertical centre of buoyancy 
. transverse metacentre height 

° longitudinal and transverse centres of floatation. 


Some recent ship case requiring the Ship Emergency Response 


are shown in Figures 4, 5, 6 and 7. 


Figure 4 
Bulk carrier grounded on reef after negotiating the 
entrance to a river estuary in severe weather conditions 


Figure 5 


Bulk carrier with damaged and flooded fore-peak 
after colliding with another vessel 


5. SERS CONTRACTS 


SERS work is undertaken within the terms of a contract * 
between Lloyd’s Register and the Ship Owner, or the Ship 
Manager. At the time of writing, there are about 50 million GT 
of shipping within SERS. This is shown in Figure 8 ona percent 
age basis for each of the major ships types. The percentage by 
number of vessels is shown in Figure 9. Understandably 
because the legislation addressed initially the environmental 
aspects of oil pollution, there are well over 500 oil tankers regis- 
tered in SERS. However, with the introduction of the ISM code 
a significant increase in other ship types is expected in the 
coming years. There are over 30% non LR Class vessels regis 
tered in SERS covering all ship types. It is interesting to note 
that the total GT in SERS is equivalent to about half the LR Class 
fleet, although in terms of ships numbers it is about 15% 


Figure 6 
Bulk carrier with severe side damage caused 
by collision on maiden loaded voyage 


Figure 8 
Distribution of GT in % 


5.1 Client Obligations 


Figure 7 
General cargo vessel with bow damage The contract defines the following obligations on the client 
caused by collision 


° provide all plans and information 

° confirm plans, etc. are representative of the ship 

e arrange emergency exercises 

° notify SERS of any changes to the ship 

° maintain all certificates for classification, national and 
international regulations 

° verify that sister ships are true sisters using technical crite 
ria provided by SERS 

° validate the computer model generated 

° provide casualty information during an emers 


an emergency exercise using the pro forma in the Emer 
gency Manual provided by SERS 


Some clients experience difficulties in locating the required 


ship data. Where possible LR will assist by using the records Co 
held within its offices at HQ, the outport or the plan approv 
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Number of vessel types in % 


offices local to the builders. It should be noted however that 
LR does not necessarily hold all of the plans (for example lines 
plans are not always provided by the builders) and clearly data 
for non-LR classed ships will have to be supplied by the Client. 

Most shipbuilders are pleased to assist in providing data, 
but usually charge a fee for supplying the plans. In addition 
LRis often required to sign confidentiality agreements confirm- 
ing that the supplied details will be used only for SERS and 
that the plans will not be passed to a third party for any reason. 
With LR’s commitment to client confidentiality, these requests 
are always accommodated. 

When a vessel has been in service a number of years, it is 
particularly important to ensure that the client confirms that 
the information supplied truly represents his ship. The Emer- 
gency Manual provided by LR is design specific reflecting these 
details and lists the information supplied by the client in order 
to obtain the rapid naval architectural service. 

The client pays fees to LR in respect of the following: 


¢ the establishment phase 

¢ — anannual subscription 

¢ — changing and updating the ships computer database and 
plans 

¢ performing an emergency exercise as required by either 
legislation or the client 

¢ supply of the emergency service during a ship casualty. 
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5.2 LR Obligations 


In return LR undertakes to: 


¢ produce a naval architectural report on the establishment 
of each ship 
¢ issue the Emergency Manual listing the information 
required by SERS during an emergency 
* assign a descriptive notation in the Ship Register as 
follows: 
— ‘ShipRight SERS’ for LR Class vessels 
— ‘SERS’ for all non LR Class vessels 
— provide the emergency service on receipt of information 
listed in the LR Emergency Manual 
— issueanaddendum for additional ships under a contract 
— transfer the ship to a third party when a new contract is 
signed. 


5.3 Transfer and Termination of SERS Cover 


Unlike Classification, when a vessel is withdrawn from SERS 
the contract is terminated. However, it is possible to transfer 
the cover provided another contract is signed with the new 
owner or ship manager. Normally, six months notice of termi- 
nation of the contract is required, although deletion of vessels 
can be immediate. Lloyd’s Register’s standard limited liability 
clause is in the contract with indemnification or proved loss 
not exceeding the amount of the fee (if any) charged by LR for 
SERS information or advice. 


6. EMERGENCY PROCEDURES AND FACILITIES 


The SERS response is strictly limited to technical services. 
Under no circumstances will SERS issue instructions to the 
client on ship operations. The service is provided direct to the 
client during an emergency. With the ship in a damaged state 
SERS information may be provided to other parties involved 
in the incident in accordance with the client’s instructions. If 
Classification or Certification aspects need to be addressed, the 
local Surveyor should be contacted by the client. The SERS 
Department will not be able to comment on Classification 
matters, these being handled by Fleet Services Department 
(FSD), LR HO and the local surveyor in the normal manner for 
LR Classed ships. Where instructed by the client foran LR Class 
ship, SERS information can be provided direct to FSD. 


6.1 Emergency Procedures 


The procedure which is applied for an emergency or exercise, 
is summarised in Figure 10. 

To invoke the Service the client uses the SERS emergency 
telephone numbers given in the Emergency Manual. At this 
stage contract details will be exchanged, pending the mobili- 
sation of the SERS team. 

During LR/HQ normal office hours the 24 hour desk 
contacts the Manager responsible for SERS. Outside office 
hours the lead Surveyor on the SERS stand-by list will be 
phoned (and/or paged) by the 24 hour desk with the above 
information. He will speak to the client and with the assistance 
of the 24 hour desk, alert the rest of the team who will assemble 
in the Ship Emergency Control Centre (Figure 11). 


LR Action 


Client action 


Analyse casualty 


— Outflow 
— Grounding 


— Equivalency 

— Floatability 

— Damage stability 

— Damage 
longitudinal 
strength 


Figure 10 
LR SERS Emergency 


6.2 Emergency Facilities 


Currently, the Centre can accommodate several emergency 
teams which can work independently 
Computer equipment in the centre includes 


° Pentium desk-top PC’s 

. 486 notebook computers 

. PostScript laser printers 

. Multi-functional optical disc drives 


fo ensure that calculations can be conducted as rapidly as 
possible the desk-top PC’s are the preferred machine for use 
during anemergency. The notebook PC’s allow SERS to provide 
a calculation capability at a location required by the client. 
[hese notebooks can communicate via an internal fax/modem 
with HQ. All PC’s have network capability. To ensure that the 
service is operable, even if the network should be unavailable, 
critical software is installed on each PC and the means provided 
to send output directly to the printer. 

To ensure that reliable emergency communications are 
available to SERS the following facilities are provided at the 
Emergency Control Centre: 


° dedicated telephones and lines 

° laser fax machines 

° E-mail via LR’s network 

° PC-based fax/modem capabilities 
. laser copy machines. 


Increasingly E-mail is being considered by clients as a reli- 
able communication medium for use during emergencies. 
E-mail not only allows messages to be relayed in an efficient 
manner but also permits the transfer of data files and other 
attachments. An important feature of the E-mail and fax capa- 
bilities is the ability to broadcast messages to a group of 
required recipients 

Upon activation of SERS, the following is recalled: 


e¢ — The ship database from optical disk, 
¢ The plans and information from the unique ship box file. 


Whilst the optical disk database is well-advanced with the 
latest technology being employed, the retrieval of plans relies 
exclusively upon the traditional means. It is however possible 
to computerise some of this information on screen for 
emergency use. 


Figure 11 
A SERS team working in Lloyd’s Register’s 
dedicated Emergency Control Centre 


7. FUTURE DEVELOPMENTS 


The main areas which will form the focus of future develop- 
ments in the SERS field are: 


° Ship Informatics 

¢ Ship Establishment Modelling 
¢ Ship Emergency Technology 

° Emergency Communications. 


These will be influenced by future enhancements to the legis- 
lation, the commercial pressures and the increasing use of 
Information Technology (IT) in all aspects of data/information 
management. 


7.1 Ship Informatics 


The latest IT systems are needed to help SERS scan, store and 
retrieve information. Of course, the use of plans in the tradi- 
tional way is reassuring especially in an emergency, however, 
enhanced computer systems and a policy of “plan” standard- 
isation in the shipbuilding industry should give everyone, 
including SERS, many benefits. 

In this respect the proposed international standards for data 
interchange, aim to store data in a format which will make it 
compatible with all future application programs. This will 
avoid the current problems of data incompatibility between the 
various computer programs used by marine industry. 

CAD/CAM systems offer considerable enhancements 
provided the approach can permeate throughout the industry 
and LR. A 3D computer-aided data management system with 
walk-through graphic representation will assist both 
modelling and analysis of emergencies. 


7.2 Ship Establishment Modelling 


The data management system currently used offers few of the 
benefits mentioned in the foregoing section. However, they will 
enable some future improvement in the interchange from one 
application system to another. As an example, many clients 
currently use HECSALV as a salvage response tool (Reference 
7) and a direct file conversion offers benefits to all involved. 
ShipRight HCM (Reference 8)/SEASAFE database file conver- 
sion will also be helpful since this will enable calculation of 
actual hull girder modulus and shear area values . These can 
then be used to determine the damage allowable bending 
moments and shear forces. 

The automatic production of reports and manuals is another 
area which would give tangible benefits from an increased use 
of I.T. This would enable reports to be written more quickly 
and improve their accuracy. 


7.3 Ship Emergency Technology 


Some of the main areas for development will include: 


¢ — enhanced computer graphics 
(more graphical displays of actual layout and damage 
content) 

¢ — residual longitudinal strength 
Greater loads and reduced structural properties will 
increase stresses on the damaged longitudinal material. 
In turn local buckling, non linear analysis and ultimate 
strength of the damaged hull girder will require careful 
analysis. Investigations need to be done in this area to 
avoid making overly pessimistic assumptions during an 
emergency 
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strength of heeled damaged ships 
e — SERS feedback for design improvements. 


7.4 Emergency Communications 


Many ships now have enhanced communication systems. 
These can exceed those required by the Rules and the Codes. 
In particular, the Department is improving and considering 
enhancements to the facilities in the Ship Emergency Control 
Centre to include: 


E-mail ship-to-shore 

electronic data exchange 

video conferencing via PC’s 

“plans” transmission via PC’s 

video condition monitoring ship-to-shore. 


8. CONCLUDING REMARKS 


Rapid naval architectural support during casualties is required 
by the introduction of recent legislation and by ship operators 
wishing to enhance their company’s emergency preparedness. 
The marine industry views SERS with enthusiasm, regarding 
it as making good safety management sense. During the last 
three years, ship owners and ship managers have enrolled their 
vessels in increasing numbers. 

LR was the first Classification Society to introduce a service 
based around pre-prepared computer models of the ships 
which are capable of simulating actual damage cases during 
emergencies. This example has been followed by the other Clas- 
sification Societies. 

When first introduced SERS was seen primarily as provid- 
ing assistance with protecting the ship, cargo, crew and 
passengers from the environment during an emergency. Now 
itis also seen as helping to protect the environment from poten- 
tial pollution and damage, the subject of legislation in recent 
years. Itis envisaged that the recent IMO SOLAS ISM Code will 
bring about a further increase in the request for the service as 
part of the need for emergency preparedness. 

Already, much is being undertaken to enhance the existing 
emergency technology and communications to meet the prac- 
tical needs of the marine industry. Damage stability is a subject 
which has developed over many years. Damage strength is 
becoming a subject of increased activity and importance. Much 
research and development in these areas will therefore be 
required in the future. 

The number of emergencies which have occurred for SERS 
over the years have grown consistently in-line with the statis- 
tics on casualties. In 1994 there were over 20 emergencies and 
emergency exercises for clients. This figure is likely to increase 
substantially in the coming years, especially with emergency 
drills being an OPA 90 and ISM Code requirement. The prudent 
ship owner and ship manager also sees the benefits of emer- 
gency exercises. 

In the future, the marine industry may experience greater 
commercial pressures to adopt ship emergency response capa- 
bilities similar to that explained in this paper. 
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APPENDIX A 
GROUNDING THEORY 


The draft, trim and heel of the stranded ship are required as 
input for the analysis of single point groundings. Assuming 
static equilibrium, the program calculates the grounding reac- 
tion force and its location, together with the required rise in 
tide to lift the ship off. Intact and damage stability, as well as 
oil outflow and water ingress can be calculated for the 
grounded ship. With the additional input of grounded length, 
intact and damage longitudinal strength can be assessed. The 
effect of a rising or falling tide can be incorporated into the anal- 
ysis. The effects of various remedial actions e.g. discharging, 
ballasting, deballasting and crossflooding can be readily 
examined. 


A.1 Calculation of Grounding Reaction and Position 


The three resultant forces on a ship aground are weight, 
displacement and grounding reaction. At static equilibrium the 
grounding reaction force, R, is given by: 


R=W-A 
where 


W=weight of ship, including weights in damaged 
compartments 
A = displacement as a weight reflecting water density 


The x and y co-ordinates of the grounding point are given by: 


Xz =W- LCG-A-LCB 
R 


yg =W-TCG-A-TCB 
R 


where 


LCG and TCG are the longitudinal and transverse centres 
of gravity, respectively 


LCB and TCB are the longitudinal and transverse centre of 
buoyancy, respectively 


A.2 Rise of Tide to Lift-off 


From the data entered for the grounded draft, trim and heel, 
and the calculated position of the grounding reaction, a corre- 
sponding value of draft at the grounded point can be calculated. 
The rise in tide to float the ship off is determined from this 
value. 


A.3 Calculation of GZ 


The values of GZ are calculated by rotating the ship about an 
axis parallel to the ship’s x axis running along the flat of bottom 
at the co-ordinate xg. For a particular angle of heel the ship is 
balanced for trim to give a zero trimming moment. A necessary 
condition of the calculation is that the draft at the grounding 
point, measured normal to the water surface, is restricted to the 
level of the tide. The value of GZ is then calculated as the right- 
ing moment, Mx, divided by the displacement, A, i.e. 
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where 


M, = the resultant moments of weight, displacement and * 


grounding reaction about the x axis 


It should be noted that the displacement varies with the 
angle of heel and thus GZ is not proportional to the righting 
moment by a constant. During the calculation an angle of heel 
may be encountered where the ship lifts off. The remaining 
portion of the GZ curve is calculated as for the free-floating 
ship. 


A.4 Damage Longitudinal Strength 


The grounding reaction is uniformly distributed over the input 
grounded length. This weight rate is then included in the inte- 
gration of ship weight and buoyancy distributions to provide 
the distributions of shear force and bending moment along the 
ship length. 


A.5 Remedial Actions 


The position of the grounding reaction is considered to be fixed 
to allow the effect of remedial actions to be assessed for both 
changes in loading and damaged compartments. 


APPENDIX B 
OIL OUTFLOW THEORY 


The uppermost and lowest positions on the breach of a tank 
are required as input for the calculation of oil outflow and water 
ingress. The calculation assumes that oil outflow and water 
ingress can occur where the lower position of the breach is on 
or below the waterline. When the breach is completely above 
the waterline then no water ingress occurs, although oil outflow 
can occur. The calculations are carried out with the ship in its 
final free flooded damage condition and the results do not affect 
the calculations of damage stability and damage longitudinal 
strength. 


B.1 Breach below the Waterline 


The oil outflow/water ingress calculations use the following 
hydrostatic balance equation: 


TPs = HoPo + HsPs + 


U 
8 
where 


T = ship draft at the upper position of the breach 

ps = density of seawater 

H, = head of oil in the breached tank 

Po = density of oil in the tank 

H, = head of floodwater above the upper position of the 
breach 

U = overpressure in the breached cargo tank 

g = gravitational constant 


The draft and heads are measured normal to the waterplane 
as the external head imposed by the seawater balances the inter- 
nal head imposed by the oil remaining in the breached tank, 
the floodwater and the overpressure, see Figure B1. 

The expressions for the quantity of oil outflow from a 
breached tank, depends on whether the density of the oil is 
greater or lesser than the seawater density. 


For po < Ps 
, U 
Vee 0'ak HoPo a a Tps 


else 
Vo= Vi-Vr 
where 
V, = volume of oil outflow from breached tank 
Vj; = initial volume of oil in the intact tank 
V,=volume of oil remaining in breached tank having 
regard to hydrostatic balance with H, = 0 


For Po > Ps 


V>=0if Vis V) 
Vo = Vi- Vi if Viz V) 


where 


V: = volume of oil in breached tank up to the lowest position 
of the breach 
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B.2 Breach above Waterline 


Irrespective of the oil density relative to the seawater the oil 
outflow is given by 


V_=0 if Vis Vi 
Vo=Vi-V if Viz Vi 


B.3 Breach at Waterline 
For Po $ Ps 


This is the case where freeflooding occurs and all the oil is lost 
i.e. 


Vo= Vi 
For Po> Ps 


oil outflow is the same as for the breach below the waterline 
for Po > Ps. 


Overpressure : 5 


Oil : density py 


Floodwater : density p, 


Seawater : density p, 


4534/12 


Figure B1 
Breached tank at hydrostatic balance 


APPENDIX C 


EXAMPLE OF SHIP EMERGENCY 
CALCULATIONS 


The following example shows how a typical ship incident can 
develop from an initial emergency toa recovery case. The naval 
architectural calculations carried out by the SERS team provide 
essential information to the on-scene “commander”, who may 
be the ship’s master or the operator’s representative. It is the 
representatives at the scene who are responsible for the final 
decisions on operational matters. They will take account of all 
information, including aspects outside SERS involvement, in 
recovering the ship. 


C.1 Overview of Scenario 


A single hull VLCC has suffered engine failure whilst leaving 
port, resulting in the ship running aground. The ship's staff 
contacted LR SERS through the 24 hour Emergency Response 
Telephone number contained in the ship’s Emergency Manual 
for SERS; and supplied incident details to the SERS team using 
the Casualty Report Form. Prior to the incident the ship 
draughts were reported to be as shown in Table C1. 
Displacement 339838 tonnes 
Draft Aft 22.92m 
Draft Forward 21.48m 


Table C1 — Reported Ship Condition 


Following the grounding the ship’sstaff reported that oil was leak- 
ing from the ship. Damage had occurred to the following tanks: 


No. 3 Crude Oil Tank (S) 
No. 4 Water Ballast Tank (S) 
No. 4 Crude Oil Tank (C) 
No. 5 Crude Oil Tank (C) 


The ship’s staff also advised that the tidal range was approx- 
imately 2.5m and reported the ship draughts shown in Table C2 
which were taken after a 0.5m fall from the high tide condition. 


Draft Aft 23.30m 
Draft Forward 


Table C2 —- Ship Condition after 0.5m fall in tide 


Urgent assistance was requested to determine the damage 
stability and damage longitudinal strength condition of the 
ship. The likely extent of oil outflow was also requested, given 
that the damage appeared to be confined to the bottom of the 
ship. Particular concern was expressed that over the following 
five hours the tide was expected to fall a further 2m. 


C.2 Damage Condition Summary 


On receiving the casualty details from the ship the SERS team 
recalled the ship’s computer model from the Emergency 
Archive along with the basic ship plans and documents, which 
are kept for each enrolled ship. Equivalence with the reported 
intact ship condition was achieved very quickly and the follow- 
ing results were obtained from the grounding calculations: 
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Figure Cl —- SEASAFE Ship Position Plot 


This screen plot from SEASAFE shows the calculated 
grounding point location and draughts for the damaged ship. 


¢ Mean draft (m) at the grounding instant 21.860 

e Trim (m) at the grounding instant -2.880 

¢ Heel (degrees) at the grounding instant $7.100 

¢ Load distribution length (m) 10.000 

¢ Calculated reaction force (tonne) 11257.427 

¢ — X location of reaction force from 17.804 
midships (m) 

¢ — Y location of reaction force from 6.507 
the centreline (m) 

¢ Rise of tide required for ‘lift off' (m) 1.091 


C.2.1 Damage Stability 


The stability characteristics of the damaged ship were calcu- 
lated explicitly for the specific loading condition and damage 
scenario. In particular the program allows for the change in 
buoyancy due to the damaged compartments and takes full 
account of the effect that the grounding reaction will have on 
the GZ curve. The following screen plot of the GZ curve shows 
that the angle of heel is about 7o to starboard. The shaded posi- 
tion of the curve demonstrates how SEASAFE calculates this 
area and compares it against standard damage stability criteria. 


C.2.2 Damage Longitudinal Strength 


The following hull girder still water shear force and bending 
moment distributions were calculated for the reported condi- 
tion of the damaged ship. The actual values calculated are 
shown against the envelopes of maximum permissible intact 
values for a seagoing condition. 

The above longitudinal strength summary is available for 
intact and damaged conditions as well as free floating and 
grounded ships. The actual distributions are shown with S or 
M to denote shear force and bending moment along with the 
envelopes of the maximum permissible values for hogging and 
sagging. This presentation is particularly good for rapid assess- 
ment of the ship’s longitudinal strength condition. 


C.2.3 Damaged Compartments 


To obtain an understanding of the location of the tanks within 
the ship; and the location of the waterline relative to the 
damaged compartments the following plots are available from 
SEASAFE. 


C.2.4 Initial Oil Outflow 


To determine the immediate oil outflow potential summarised 
in Table C3 the SERS team used the program to calculate the 


Condition: 2. HOM LOAD DEP COND 10 


Draft: 21.87 Trim: -2.88 Heel: $7.0 


Dam.Case: 9 Starboard Damage Stage-Final 
ts —— 2 


Arm! 


Requirement 


The area under GZ must be atleast .017 


Range of positive stability must be at least 20.0 


Grounded case, Rise in tide(m)=.00 


Damage 
stability 


Actual GM 


1=Righting arm 


A 


='Lift off 


— =Free floating 


Vh=7.0 


wZ =A1=0.48 


Vv=60.0 


Obtained 
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Figure C2 - SEASAFE GZ curve for the damaged, grounded ship 


Condition: 2 HOM LOAD DEP COND i 


Draft: 21.87 Trim: -2.88 Heel: $7.0 


Dam. Case: 9 Starboard Damage Stage:Final 
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Figure C3 - SEASAFE shear force and bending moments curve 


following values which take account of the estimated location 
of the damage on the bottom shell and the effects of hydrostatic 
balance. If the ship’s staff had reported significant wave condi- 
tions, the program also has a facility to take this effect into 
account. 


Compartment Intact Cargo Oil Outflow | 
No. 3 Crude Oil Tank (S 21749(t) 4028(t) 


No. 4 Crude Oil Tank a 16254 (t) 3393\(t) 
No. 5 Crude Oil Tank (C) | 35775(t) 7177(t) 


Totals 73778(t) 14598(t) 


Table C3 - Calculated potential oil outflow 
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C.2.5 Communications With On-Scene Commander and 
Operator’s Representatives 


Throughout the incident regular contact was maintained with 
the on-scene Commander and the operator’s representatives. 
The results summarised above were relayed by fax and tele- 
phone; and as new details became available from the scene, 
these were relayed to the SERS team in order that the computer 
model could be updated. 


HOM LOAD 
Trim: -2.88 
Starboard 


DEP COND 10 
Heel: S70 Grounded 
Damage 


Condition: 2 
Draft: 21.87 
Dam Case: 9 


Stage-Final 


NO4 W.B.T.(S) 


F2(Next compt) 


Condition: 2 HOM LOAD DEP COND 10 
Draft: 21.87 Trim:-2.88 Heel: $7.0 
Dam.Case: 9 Starboard Damage Stage:Final 


Grounded case, Rise in tide(m) = .00 


Damaged 


compartments 


case, Rise in tide(m) = 


Figure C4 
SEASAFE screen plot 
showing the location 
of No. 4 Water Ballast 
Tank (Starboard) 


P(Dump screen plot) F8(Exit) 


Damaged 
compartments 


Figure C5 
SEASAFE screen plot 
showing the location 
of No. 5 Cargo Oil 
Tank (Centre) 


IM a 
yl 


C.3 Fall in Tide 


The next stage in the emergency response was to assess the 
effect that the expected fall to low tide would have on the condi- 
tion of the ship and the potential for further oil loss. The oil-spill 
clean up team at the scene were particularly interested in the 
projection for oil loss to assist them in deploying equipment 
around the ship. 


C.3.1 Grounding Reaction 


With the estimated drop in tide of 2m the grounding reaction 
was expected to increase as detailed in Table C4. 


22.50 
Drat Forward 


Table C4 — Grounded condition of ship after 2m drop in tide 
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C.3.2 Damage Longitudinal Strength 


The change in grounding reaction led to the following expected 
increase in hull girder bending moments and shear forces. As 
can be seen in Figure C7 the seagoing permissibles are exceeded 
at certain locations. In particular the damage bending moment 
is calculated to be 161% of the intact seagoing permissible value 
in the midship region. As the ship was reported to be in shel- 
tered water and relatively calm weather conditions, a quick 
calculation using the intact harbour permissibles was made to 
compare the margins on damage longitudinal strength. 

On both of the above longitudinal strength plots shown in 
Figures C6 and C7 the ‘step’ in the shear force curve caused by 
the grounding reaction can be seen clearly. 

Using calculations of hull girder section properties a prelim- 
inary assessment was made of the likely reduction in global 
hull girder strength. In this case the exact extent of damage was 
not known by the operator at the time of the incident. However 
an estimate of the reduction in hull girder section properties 
(see Table C5) was made using a conservative assumption 
which was made by the operator on the extent of damage. 


Longitudinal 


Condition: 2 HOM LOAD DEP 10 C OND Grounded case, Rise in tide(m) = -2.00 
Harbour Permissibles strength 


Draft: 20.50 Trim: -4.00 Heel S2 


SF 
25000 
1000000 


20000 
800000 


5000 
600000 — 1500¢ 


400000 10000 


200000 d : 5000 


-200000 = -5000 


-400000 40000 


-600000 — 
oe -15000 


-800000 . 
-20000 
-1000000 
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Max S.F. = 20760. T -80% of allowable at frame 78 
Max B.M.= 1078705. T*m -95% of allowable at frame 91 


Figure C6 — SEASAFE shear force and bending moment curve (against harbour permissible) 


Condition: 2 HOM LOAD DEP COND 10 Grounded case, Rise in tide(m) = -2.00 Longitudinal 


Draft: 20.50 Trim:-4.00  Heel:S2.0 Seagoing Permissibles strength 
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-91% of allowable at frame 78. 
Max _B.M. = 1078702. T*m -161% of allowable at frame 91 


Figure C7 — SEASAFE shear force and bending moment curve (against seagoing permissible) 


Section Property Intact Damaged C.3.3 Oil Outflow 


Area: cm2 7.305E+04 | 6.428E+04 Asa result of the fall in tide on the grounded ship the potential 
Ixx: em2-m2 1,226E+07 | 1.007E+07 for further oil outflow was assessed. The results are 


SM - Deck: cm2-m 6.864E+05 | 6.355E+05 summarised in Table C6. 


No. 3 COT (S) 21749 15493 
No. 4 COT (C) 
No. 5 COT (C) 


Y upper: m 1417.87 15.84 
SM - Keel: cm2-m 8.080E+05 | 5.854E+05 
Y lower: m 15.18 17.20 
Shear Area y: cm2 2.561E+04 | 2.498E+04 


Table C5 — Calculations of hull girder section properties 


Table C6 — Re assessment of oil outflow potential 
following a further drop in tide 
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C.4 Lightering at High Tide to Float-off C.4.1 Grounding Reaction 


In the hours following the incident the on-scene casualty team With the rise in tide to 0.5m above the initial starting point the 
had arranged for a smaller ship to come alongside to receive a SERS team calculated that removal of 10,000 tonnes from N0.3 
transfer of cargo. It was proposed that cargo be lightered from COT (C) tank would give the condition summarised in Table C7. 


No. 3 centre cargo tank. The SERS team were asked to confirm 


that about 9,000 to 10,500 tonnes of cargo might need to be 
Draft Forward 20.18m 


removed in order to achieve refloat at high tide and to provide 
details of damage stability, damage longitudinal strength and 


: ; T -3. 
potential further oil outflow. wie 3.53m 


Table C7 — Updated ship condition following cargo lightening 


Condition: 2 HOM LOAD DEPCOND 10 Lie ne 
Draft: 21.94 Trim:-3.53__ Heel: $8.3 Harbour Permissibles ——- 
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Figure C8 —- SEASAFE shear force and bending moment curves (against harbour permissibles) 


2 Longitudinal 
Condition: 2 10 HOM LOAD DEP COND - strength 
Draft 21.94 Trim 3.53 Heel $8.3 Seagoing Permissibles 
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Figure C9 — SEASAFE shear force and bending moment curves (against seagoing permissibles) 
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C.4.2 Damage Longitudinal Strength 


During the discharge sequence it was confirmed that the maxi- 
mum shear forces and bending moments would reduce to the 
following values in a free float damaged condition after 
discharge. On both of the plots below the elimination of the 
‘step’ in the shear force distribution, as shown in the previous 
plots, can be seen. 

On both of the above plots the elimination of the ‘step’ in 
the shear force distribution, as shown in the previous plots, can 
be seen. 


C.4.3 Oil Outflow 


As a result of the refloat operations proposed, the potential for 
further oil outflow was assessed as summarised in Table C8. 


Compartment Intact Cargo 


No. 3 COT (S) 21749 
No. 4 COT (C) 16254 
No. 5 COT (C) r 

Totals 


Table C8 — Updated oil outflow potential 
following refloat operations 


C.4.4 Water Surface To Deck Margins 


An assessment was made of the freeboard along the length of 
the ship in the heeled and trimmed condition to check that there 
was no danger of down-flooding. Figure C10 shows that the 
minimum freeboard was found to be 2.01 m. 


C.5 Completion of SERS Involvement 


At this point in the incident the operator considered that the 
situation was under control and that for the present no further 
action was required by SERS. The SERS team were instructed 
to stand down and the operator was advised to use the SERS 
24 hour emergency telephone numbers if further calculations 
were required. 


Figure C10 
SEASAFE can show the position of the flooded waterline relative 
to the main deck at a large number of points along the ship 
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